non-resizable popup window can't be closed w/ mouse

VERIFIED DUPLICATE of bug 56165

Status

P3
critical
VERIFIED DUPLICATE of bug 56165
19 years ago
14 years ago

People

(Reporter: namos, Assigned: security-bugs)

Tracking

({regression})

Trunk
x86
Linux
regression

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

19 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; SunOS 5.8 sun4u; en-US; m17) Gecko/20000725
BuildID:    2000072522

a javascript pop-up window that can't be resized also can't be iconized or
closed with the mouse (at least in cde).  the buttons in the corners of the
title bar are missing

Reproducible: Always
Steps to Reproduce:
1.go to http://www.hkhosting.com/contact.shtml
2.click "why email?" near bottom
3.try and close the window without using the kbd

Comment 1

19 years ago
this works on win32 mozilla 072608 on NT.  There is an "x" in the top right
corner of the titlebar allowing you to close the window.  I don't have a Sun
Solaris box to test on so adding qawanted and looking for confirmation.
Keywords: qawanted

Comment 2

19 years ago
I have no problem on my redhat linux i686 box running m17 who's build id has
been blasted from the face of the bottom right corner.

Comment 3

19 years ago
the build ID now appears in the titlebar.  Resolving worksforme.  
Status: UNCONFIRMED → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → WORKSFORME

Comment 4

18 years ago
**Mass Spamm**
adding verifyme keyword to all worksforme bugs.
Keywords: verifyme

Comment 5

18 years ago
Reopening. This is happening on commercial branch Linux build 101109. Setting to 
critical, since this is probably preventing Security Advisor child windows from 
working correctly.
Severity: minor → critical
Status: RESOLVED → UNCONFIRMED
Keywords: regression, rtm
OS: Solaris → Linux
Hardware: Sun → PC
Resolution: WORKSFORME → ---

Comment 6

18 years ago
Confirming.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: qawanted, verifyme
QA Contact: doronr → junruh

Comment 7

18 years ago
This is a bug with the commercial branch 101109 Linux build.
Assignee: asa → mstoltz

Comment 8

18 years ago
unable to reproduce this problem with 10/11 mozilla branch or trunk linux 
builds.  This has not regressed. This bug was concerned with the missing 
titlebar close control "X" that prevented the user from killing the popup. The 
popup at http://www.hkhosting.com/contact.shtml works just fine.  It has a 
titlebar and close widget.

Comment 9

18 years ago
John asked me to take a look at this. (By the way Asa: I'm told this is bug only
known to show up on a Netscape rtm branch build, not Mozilla.) Following the
steps given above to reproduce, the website issues a window.open call with this
features parameter:

"width=350,height=350,directories=0,location=0,menubar=0,resizable=0,scrollbars=yes,status=0,titlebar=0,toolbar=0"

As you can see, they're explicitly trying to turn the titlebar off, though not
the closebox. Still, this is very rude, since the window they're creating
contains no "close" button in its content, and the OS close widget is nearly
always located on the titlebar. However, Mozilla is supposed to disallow turning
off the titlebar by unprivileged JavaScript.

So perhaps there's some code change in the affected tree that makes it pay a
kind of partial attention to the titlebar=0 line. To help pin this down, I
suggest someone spend some time with the affected build, opening windows with
various combinations of titlebar/closebar on/off and see what happens.

With unprivileged JS, you shouldn't be able to affect the presence of the
titlebar at all, but you should be able to get rid of the close box. This
experiment is most easily done using the sample XUL source that you can get to
with a debug Mozilla build from the Debug menu -> XPToolkit -> Dialog page.
That's missing from the Netscape builds, so you'll have to grab the source for
that page yourself. You want dexopenchrome.xul and dexparamdialog.* from the
mozilla/xpfe/browser/samples/ directory. Attempt to turn off the titlebar by
leaving the "titlebar" checkbox unchecked, but checking the "explicit" checkbox
next to it.

Again, I'm thinking perhaps this particular build interprets strangely the
"features" parameter used by this website when opening a window. Pinning down
what combination of features would be helpful.

Comment 10

18 years ago
pschwartau - is this your area to try to narrow down as per above comments?

Comment 11

18 years ago
No, I'm afraid not - I'm QA for the standalone JS engine, not the browser.
I'll be glad to help out if needed, however - 

Comment 12

18 years ago

*** This bug has been marked as a duplicate of 56165 ***
Status: NEW → RESOLVED
Last Resolved: 19 years ago18 years ago
Resolution: --- → DUPLICATE

Comment 13

18 years ago
Verifying Duplicate -
Status: RESOLVED → VERIFIED
Product: Browser → Seamonkey
You need to log in before you can comment on or make changes to this bug.