Bug 190251 – Passing noopener=NOOPENER to window.open() should cause the new window to not have an opener

• Status: RESOLVED
• Resolution: WONTFIX
• Component: DOM

[Chris Dumez]

Passing noopener=NOOPENER to window.open() should cause the new window to not have an opener, similarly to noopener=1:
- https://html.spec.whatwg.org/#window-open-steps (step 5)

It does not matter what the value is, if there is a key named "noopener", then the new window should not have an opener.

[Chris Dumez]

Created attachment 351528 [details]
Patch

[WebKit Commit Bot]

Comment on attachment 351528 [details]
Patch

Clearing flags on attachment: 351528

Committed r236802: <https://trac.webkit.org/changeset/236802>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.

[Radar WebKit Bug Importer]

<rdar://problem/44980240>

[Darin Adler]

Comment on attachment 351528 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=351528&action=review

> Source/WebCore/page/WindowFeatures.cpp:161
>      else if (equalLettersIgnoringASCIICase(key, "noopener"))
> -        features.noopener = numericValue;
> +        features.noopener = true;

So even values like "0" and "no" mean yes? Do we have test coverage for those kinds of values?

Also seems that other boolean keys like menubar, toolbar, location, status, fullscreen, and scrollbars might need similar treatment. Would be good to make sure we have tests and make sure those are also right.

[Chris Dumez]

Comment on attachment 351528 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=351528&action=review

>> Source/WebCore/page/WindowFeatures.cpp:161
>> +        features.noopener = true;
> 
> So even values like "0" and "no" mean yes? Do we have test coverage for those kinds of values?
> 
> Also seems that other boolean keys like menubar, toolbar, location, status, fullscreen, and scrollbars might need similar treatment. Would be good to make sure we have tests and make sure those are also right.

Yes, even values like "0" and "no" enable no opener as per the special case in the spec:
https://html.spec.whatwg.org/#window-open-steps (step 5): Let noopener be true if tokenizedFeatures contains an entry with the key "noopener".

imported/w3c/web-platform-tests/html/browsers/the-window-object/apis-for-creating-and-navigating-browsing-contexts-by-name/open-features-tokenization-noopener.html contains extensive testing for noopener, including "0" / "false" values.

The other keys you mention (like menubar) are currently missing from the spec:
- https://github.com/whatwg/html/issues/2464

However, other browsers seem to treat them like regular booleans so I do not think we should align them with noopener. AFAICT, noopener is the exception but I am not quite sure why (will comment on the spec).

[Chris Dumez]

Reverted r236802 for reason:

Working on getting the HTML spec updated instead (https://github.com/whatwg/html/pull/4079)

Committed r237002: <https://trac.webkit.org/changeset/237002>