W3C home > Mailing lists > Public > public-html-bugzilla@w3.org > January 2011

[Bug 11839] window.opener needs to be writable, not readonly

From: <bugzilla@jessica.w3.org>
Date: Sun, 23 Jan 2011 02:29:56 +0000
To: public-html-bugzilla@w3.org
Message-Id: <E1PgpiG-0000gG-Pr@jessica.w3.org>
http://www.w3.org/Bugs/Public/show_bug.cgi?id=11839

Boris Zbarsky <bzbarsky@mit.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bzbarsky@mit.edu,
                   |                            |cam@mcc.id.au

--- Comment #1 from Boris Zbarsky <bzbarsky@mit.edu> 2011-01-23 02:29:56 UTC ---
In particular, Gecko allows setting it to null, and web pages rely on this.  So
does Safari, Chrome, Opera, and IE.  I haven't tested what other values it can
be set to; Gecko doesn't allow any values other than null for unprivileged
scripts.

Testcase:

  file1: <div onclick="window.open('file2.html')">click me</div>

  file2: <script>
           alert(window.opener);
           window.opener = null;
           alert(window.opener);
         </script>

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
Received on Sunday, 23 January 2011 02:29:57 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Sunday, 23 January 2011 02:29:58 GMT