Bug 53993 – [android] Elements from an iframe hidden using overflow:hidden and height:0 are still clickable

• Status: RESOLVED
• Resolution: WONTFIX
• Component: Frames

[Marek Stepien]

Created attachment 81621 [details]
testcase

Content from an iframe that is placed inside a div that has height: 0 and overflow: hidden still invoked onclick event handlers after tapping the place which would be occupied by it if it had a non-zero height.

Basically, we have two divs with the same width. Even though the first div has a height of zero and its overflow is hidden, the button's onclick handler will still be invoked if you tap over the text from the second div.:

------
<style>
div {
    border: 1px solid red;
    height: 500px;
    width:  500px;
}

#t1 {
    overflow: hidden;
    height:   0;
}
</style>

<div id="t1">
    <iframe width=500 height=500 src='data:text/html,<button onclick="alert(true)" style="width:500px;height:500px">Are you gonna click this?</button>' ></iframe>
</div>
<div id="t2">Mobile Webkit (at least on Android): Even though you click this div, the click event will be fired by the button from the iframe</div>
------

Run this code at jsfiddle: http://jsfiddle.net/9YcnJ/6/

This only happens on Android WebKit. I can reproduce it on my own Samsung Galaxy i5800 (vendor-provided Android 2.1) and my employer gets a few reports from people using our web app on Samsung Galaxy Tab that it happens to them as well. It does NOT happen on my iPod touch (and we do not have any reports from our uses with iPhones) nor on desktop WebKit-based browsers. 

Sorry, if this is not the best place for reporting Android Webkit bugs. I tried to find a better place for Android Webkit bugs, but couldn't.

[Marek Stepien]

FWIW, this is my phone's browser user-agent string:

Mozilla/5.0 (Linux; U; Android 2.1-update1; pl-pl; GT-I5800 Build/ECLAIR) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17(KHTML, like Gecko) Version/4.0 Mobile Safari/530.17

[Marek Stepien]

Something got screwed up during pasting. My UA string is:

Mozilla/5.0 (Linux; U; Android 2.1-update1; pl-pl; GT-I5800 Build/ECLAIR) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17

[Eric Seidel (no email)]

Android Chromium is the new future.