71766 - target attribute not used in frames in http URLs

Status: VERIFIED DUPLICATE of bug 13871

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[Heikki Toivonen (remove -bugzilla when emailing directly)]

The testcase in the URL has a frameset with two frames. To reproduce the bug:

1. Load URL.
2. Click "i.html" link in the left frame.

Expected results: i.html should replace the contents of the right hand frame.

What happens: i.html is opened in a new window.

The bizarre thing is that if you save the test files to your local drive,
everything works as expected.

I found this while trying to verify bug 57190. When the testcase in this bug
works you should also add a comment of that in 57190.

Comment 1

[Boris Zbarsky [:bzbarsky]]

This is most likely a security issue -- frames from one site are not allowed to
write into frames from another site (or change their locations).

If both frames come from the same domain, there should be no problems.

Comment 2

[Heikki Toivonen (remove -bugzilla when emailing directly)]

Yeah, seems like a security issue. I placed all of the files on the same http
server and they work just fine: http://blueviper/heikki/paint.html

I do not know enough about the security policies to say if this is the desired
behaviour or if this is a bug.

Comment 3

[Eric Pollmann]

Yes, this is the desired behaviour.  See bug 13871, which instituted this policy.

*** This bug has been marked as a duplicate of 13871 ***

Comment 4

[Amarendra Hanumanula]

QA Contact update

Comment 5

[Amarendra Hanumanula]

 The attached testcase works fine, i.html loads in the sideframe instead of 
opening in a new window. Verified on WIN2K. Build ID: 2002012403