RESOLVED FIXED 266354
Sever window opener on manual navigation 
https://bugs.webkit.org/show_bug.cgi?id=266354
Summary Sever window opener on manual navigation
Ben Nham
Reported 2023-12-13 10:17:12 PST
When a user does a cross-origin manual navigation (e.g. navigating via the address bar, opening a bookmark, ...), then we should sever the window.opener reference (by creating a new browsing context group?). This should be safe since other browsers like Chrome and Firefox are already doing this. Related WHATWG discussions: https://github.com/whatwg/html/issues/5767#issuecomment-763855860 https://github.com/whatwg/html/issues/6356 https://github.com/whatwg/html/issues/1440
Attachments
Add attachment proposed patch, testcase, etc.
Ben Nham
Comment 1 2023-12-13 10:17:45 PST
rdar://118951619
Ben Nham
Comment 2 2023-12-13 10:24:25 PST
Pull request: https://github.com/WebKit/WebKit/pull/21747
EWS
Comment 3 2023-12-19 19:51:29 PST
Committed 272321@main (e0471a8d0e2b): <https://commits.webkit.org/272321@main> Reviewed commits have been landed. Closing PR #21747 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.