← Back to team overview

ubuntu-webapps-bugs team mailing list archive

[Bug 1623988] [NEW] Scripts should only be able to close windows that were opened by it

 

Public bug reported:

Firefox only allows scripts to close windows that were opened by it.

Chrome allows this too, but it also allows a script to close a window
that wasn't opened by it if its navigation history only has a single
entry.

This presents a problem in Oxide - calling window.close() is
destructive, which means it's technically mandatory for applications to
implement and handle WebView::closeRequested.

What we should do is make Oxide behave like Firefox here, and then it
only becomes mandatory to implement WebView::closeRequested in the case
where an application implements WebView::newViewRequested.

** Affects: oxide
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to Oxide.
https://bugs.launchpad.net/bugs/1623988

Title:
  Scripts should only be able to close windows that were opened by it

Status in Oxide:
  New

Bug description:
  Firefox only allows scripts to close windows that were opened by it.

  Chrome allows this too, but it also allows a script to close a window
  that wasn't opened by it if its navigation history only has a single
  entry.

  This presents a problem in Oxide - calling window.close() is
  destructive, which means it's technically mandatory for applications
  to implement and handle WebView::closeRequested.

  What we should do is make Oxide behave like Firefox here, and then it
  only becomes mandatory to implement WebView::closeRequested in the
  case where an application implements WebView::newViewRequested.

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1623988/+subscriptions