[Webkit-unassigned] [Bug 36459] New: Assigning to window.name in an iframe breaks link targets in containing document.

Mon Mar 22 12:38:35 PDT 2010

https://bugs.webkit.org/show_bug.cgi?id=36459

           Summary: Assigning to window.name in an iframe breaks link
                    targets in containing document.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.6
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Frames
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rainhead at gmail.com

Consider the following two small HTML documents:

<html>
<head><title>A</title></head>
<body>
<iframe src="b.html" name='b'></iframe>
<a href="http://www.google.com/" target="b">Google</a>
</body>
</html>

<html>
<head><title>B</title></head>
<body>
<script>
var name = 'fnord';
</script>
</body>
</html>

The var statement (WHY does a var statement in a script tag assign to window?)
changes the b's window.name, which breaks the Google link.

The W3C HTML DOM spec says that the 'name' attribute of an iframe element
"assigns a name to the current iframe". I can't find anything suggesting that
this attribute has anything to do with the contained window's name property,
yet in WebKit, they seem to be the same.

Neither IE nor FireFox appear to exhibit this behavior.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.