486067 - setting window.opener to null does not hide MessageEvent.origin

Status: UNCONFIRMED

(Core :: DOM: Events, defect, P5)

Description

[Eli Grey (:sephr)]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.8) Gecko/2009032712 Ubuntu/8.10 (intrepid) Firefox/3.0.8 GTB5
Build Identifier: 

If you create a window and set it's opener to null, MessageEvent's origin still contains the opening window's protocol and host.

Reproducible: Always

Steps to Reproduce:
1. var win = window.open();
2. win.opener = null;
3. win.location.replace("a data uri that tries to get MessageEvent.origin")
Actual Results:  
MessageEvent.origin is the window's opener's protocol and host.

Expected Results:  
MessageEvent.origin is not the window's opener's protocol and host.

Comment 1

[Eli Grey (:sephr)]

Attachment: Testcase

Comment 2

[Eli Grey (:sephr)]

Attachment: Testcase that doesn't trigger pop-up blocker

I didn't notice the last testcase triggered the pop-up blocker. This one doesn't.

Comment 3

[Eli Grey (:sephr)]

I just tested the testcase on WebKit and WebKit's solution is to set MessageEvent.origin null.

Comment 4

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1472046

Move all DOM bugs that haven't been updated in more than 3 years and has no one currently assigned to P5.

If you have questions, please contact :mdaly.