Don't allow window.focus on *self* in response to clicks (prevent pop-unders)

RESOLVED FIXED in mozilla2.0b7

Status

()

Core
DOM
--
enhancement
RESOLVED FIXED
8 years ago
6 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug)

Trunk
mozilla2.0b7
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [fixed by bug 369306 ])

(Reporter)

Description

8 years ago
Clicks should allow scripts to call window.focus() on other windows, since they can open new focused windows, but should not allow scripts to call window.focus() on themselves, since that is pretty much only used to hide the origin of pop-up ads ("pop-unders").  I originally suggested this in bug 355482 comment 0.
(Reporter)

Updated

8 years ago
Blocks: 355482

Comment 1

7 years ago
The patch in bug 369306 implements this.  Actually, the exact semantics are slightly more restrictive: window A can focus window B iff A created B.
(Reporter)

Updated

7 years ago
Blocks: 565104
(Reporter)

Updated

7 years ago
Depends on: 369306
So does bug 369306 being fixed means this one's fixed, too?

Comment 3

7 years ago
Yes, this is fixed too.
Status: NEW → RESOLVED
Last Resolved: 6 years ago
OS: Mac OS X → All
Hardware: x86 → All
Resolution: --- → FIXED
Whiteboard: [fixed by bug 369306 ]
Target Milestone: --- → mozilla2.0b7
You need to log in before you can comment on or make changes to this bug.