[Bug 13894] New: window.open() doesn't check for trusted events the way HTMLAnchorElement.click() does. We should probably move the check into the "rules for choosing a browsing context" algorithm.

http://www.w3.org/Bugs/Public/show_bug.cgi?id=13894

           Summary: window.open() doesn't check for trusted events the way
                    HTMLAnchorElement.click() does. We should probably
                    move the check into the "rules for choosing a browsing
                    context" algorithm.
           Product: HTML WG
           Version: unspecified
          Platform: Other
               URL: http://www.whatwg.org/specs/web-apps/current-work/#noo
                    pener
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P3
         Component: HTML5 spec (editor: Ian Hickson)
        AssignedTo: ian@hixie.ch
        ReportedBy: contributor@whatwg.org
         QAContact: public-html-bugzilla@w3.org
                CC: ian@hixie.ch, mike@w3.org,
                    public-html-wg-issue-tracking@w3.org,
                    public-html@w3.org


Specification: http://www.whatwg.org/specs/web-apps/current-work/complete.html
Multipage: http://www.whatwg.org/C#noopener
Complete: http://www.whatwg.org/c#noopener

Comment:
window.open() doesn't check for trusted events the way
HTMLAnchorElement.click() does. We should probably move the check into the
"rules for choosing a browsing context" algorithm.

Posted from: 2620:0:1000:137d:fa1e:dfff:fedd:ce8d by ian@hixie.ch
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) AppleWebKit/535.1
(KHTML, like Gecko) Chrome/15.0.849.1 Safari/535.1

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Wednesday, 24 August 2011 23:15:20 UTC