test CORS issue on live Gmail

[tomholub]

#2934

Actually, I can reproduce the issue even without Gmail as the host page.

That means browser behavior must have changed, yet again.

[martgil]

Hi @tomholub,

I have tried this one and I was able to send an encrypted email even when I open the compose page directly to my chrome browser. Is it normal?

[tomholub]

Thank you for bringing this issue to my attention. I may want to close this one too, without fixing. This behavior was very hard to test.

For your question:

I have tried this one and I was able to send an encrypted email even when I open the compose page directly to my chrome browser. Is it normal?

I think so. There is nothing preventing you from copying the URL from the Gmail page secure compose iframe, and then pasting it into a new window and send a message from there. Is that what you meant? In fact, due to some browser sandbox restrictions when testing, this is how a lot of our automated tests do it.

[martgil]

You're welcome. Thanks for explaining, Tom!