[Webkit-unassigned] [Bug 63263] Sandboxed iframe allows links to open in new window using target='_blank'

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jun 23 10:34:10 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=63263





--- Comment #2 from Shane Corgatelli <shane at eznettools.com>  2011-06-23 10:34:10 PST ---
I discovered a related problem on further testing. If I change the sandbox attribute in the test script to be sandbox="allow-scripts" then the link that uses javascript also opens a new window in violation of the spec. Allowing javascript should still prevent popup windows. I added a second test case that demonstrates this.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list