Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider not setting browsing context name when noopener/noreferrer are used #4314

Closed
annevk opened this issue Jan 22, 2019 · 1 comment
Closed
Labels

Comments

@annevk
Copy link
Member

annevk commented Jan 22, 2019

<a href=... target=test rel=noopener>test</a>

Basically with noopener/noreferrer a document is proclaiming not to want anything to do with some other document, but can still set some state for that other document. (This is also true with sandboxing flags, but that's a much more understandable case.)

Mozilla is somewhat interested in not propagating name here (test in the example above).

Would others be interested in following that?

cc @cdumez @rniwa @mikewest @mystor

@annevk annevk added topic: navigation security/privacy There are security or privacy implications topic: browsing context labels Jan 22, 2019
@annevk
Copy link
Member Author

annevk commented Jan 29, 2019

Per #1826 this isn't really web-compatible as name-lookup has to happen first for noreferrer at least and we might as well keep noopener consistent with that.

@annevk annevk closed this as completed Jan 29, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

1 participant