565541 - Web sites shouldn't be allowed to resize main window

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta property="og:type" content="website"> <meta property="og:title" content="565541 - Web sites shouldn't be allowed to resize main window"> <meta property="og:url" content="https://bugzilla.mozilla.org/show_bug.cgi?id=565541"> <meta property="og:description" content="VERIFIED (mounir) in Core - DOM: Core & HTML. Last updated 2024-04-16."> <meta name="twitter:label1" value="Type"> <meta name="twitter:data1" value="defect"> <meta name="twitter:label2" value="Priority"> <meta name="twitter:data2" value="--"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <meta name="color-scheme" content="dark light"> <meta name="generator" content="Bugzilla 20250219.1"> <meta name="bugzilla-global" content="dummy" id="bugzilla-global" data-bugzilla="{"api_token":"","config":{"basepath":"\/","cookie_consent_enabled":"1","cookie_consent_required":0,"essential_cookies":["bugzilla","Bugzilla_login","Bugzilla_logincookie","Bugzilla_login_request_cookie","github_state","github_token","mfa_verification_token","moz-consent-pref","sudo"],"urlbase":"https:\/\/bugzilla.mozilla.org\/"},"constant":{"COMMENT_COLS":80},"param":{"maxattachmentsize":"10240","maxusermatches":"50","splinter_base":"\/page.cgi?id=splinter.html&ignore=\/","use_markdown":"1"},"string":{"TextEditor":{"command_bold":"Bold","command_bulleted_list":"Bulleted list","command_code":"Code","command_heading":"Heading","command_italic":"Italic","command_link":"Link","command_numbered_list":"Numbered list","command_quote":"Quote","comment_editor":"Comment Editor","edit":"Edit","etiquette_link":{"href":"page.cgi?id=etiquette.html","text":"Etiquette"},"guidelines_link":{"href":"page.cgi?id=bug-writing.html","text":"Bug Writing Guidelines"},"loading":"Loading…","markdown_link":{"href":"https:\/\/guides.github.com\/features\/mastering-markdown\/","text":"Markdown supported"},"preview":"Preview","preview_error":"Preview could not be loaded. Please try again later.","text_editor":"Text Editor","toolbar_label":"Markdown text-formatting toolbar"},"bug":"bug","bug_type_required":"You must select a Type for this bug","component_required":"You must select a Component for this bug","description_required":"You must enter a Description for this bug","short_desc_required":"You must enter a Summary for this bug","version_required":"You must select a Version for this bug"},"user":{"cookie_consent":"","is_new":true,"login":""}}"> <meta name="google-site-verification" content="JYXIuR9cAlV7fLmglSrc_4UaJS6Wzh5Mdxiorqu5AQc" /> <title>565541 - Web sites shouldn't be allowed to resize main window</title> <link href="/static/v20250219.1/skins/standard/global.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/BugModal/web/bug_modal.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/js/jquery/plugins/contextMenu/contextMenu.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/BMO/web/styles/bug_modal.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/EditComments/web/styles/inline-comment-editor.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/js/jquery/ui/jquery-ui-min.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/js/jquery/ui/jquery-ui-structure-min.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/js/jquery/ui/jquery-ui-theme-min.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/skins/lib/prism.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/skins/standard/consent.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/Needinfo/web/styles/needinfo.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/Review/web/styles/badge.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/extensions/Review/web/styles/review.css" rel="stylesheet" type="text/css"><link href="/static/v20250219.1/skins/standard/text-editor.css" rel="stylesheet" type="text/css"> <script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/jquery/jquery-min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/jquery/ui/jquery-ui-min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/jquery/plugins/contextMenu/contextMenu-min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/jquery/plugins/devbridgeAutocomplete/devbridgeAutocomplete-min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/global.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/util.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/widgets.js"></script> <script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9">BUGZILLA.value_descs = JSON.parse('{\"bug_status\":{},\"resolution\":{\"\":\"---\"}}'); var tracking_flags_str = "{\"flags\":{\"tracking\":{\"cf_tracking_firefox_esr115\":\"---\",\"cf_status_firefox_esr115\":\"---\",\"cf_status_firefox135\":\"---\",\"cf_tracking_thunderbird_esr128\":\"---\",\"cf_tracking_firefox137\":\"---\",\"cf_tracking_firefox136\":\"---\",\"cf_tracking_firefox_relnote\":\"---\",\"cf_tracking_firefox135\":\"---\",\"cf_status_firefox136\":\"---\",\"cf_status_thunderbird_esr115\":\"---\",\"cf_status_firefox_esr128\":\"---\",\"cf_tracking_firefox_esr128\":\"---\",\"cf_tracking_firefox7\":\"+\",\"cf_status_firefox137\":\"---\",\"cf_status_thunderbird_esr128\":\"---\",\"cf_tracking_thunderbird_esr115\":\"---\"},\"project\":{\"cf_performance_impact\":\"---\",\"cf_webcompat_score\":\"---\",\"cf_a11y_review_project_flag\":\"---\",\"cf_webcompat_priority\":\"---\",\"cf_accessibility_severity\":\"---\"}},\"comments\":{\"cf_tracking_firefox135\":{\"?\":\"[Tracking Requested - why for this release]:\"},\"cf_tracking_firefox136\":{\"?\":\"[Tracking Requested - why for this release]:\"},\"cf_tracking_firefox137\":{\"?\":\"[Tracking Requested - why for this release]:\"},\"cf_tracking_firefox_esr115\":{\"?\":\"[Tracking Requested - why for this release]:\"},\"cf_tracking_firefox_relnote\":{\"?\":\"Release Note Request (optional, but appreciated)\\n[Why is this notable]:\\n[Affects Firefox for Android]:\\n[Suggested wording]:\\n[Links (documentation, blog post, etc)]:\"},\"cf_a11y_review_project_flag\":{\"requested\":\"Description:\\nPlease provide an explanation of the feature or change. Include a description of the user scenario in which it would be used and how the user would complete the task(s).\\nScreenshots and visual UI specs are welcome, but please include sufficient accompanying explanation so that blind members of the accessibility team are able to understand the feature\/change.\\n\\nHow do we test this?\\nIf there is an implementation to test, please provide instructions for testing it; e.g. setting preferences, other preparation, how to trigger the UI, etc.\\n\\nWhen will this ship?\\nTracking bug\/issue:\\nDesign documents (e.g. Product Requirements Document, UI spec):\\nEngineering lead:\\nProduct manager:\\n\\nThe accessibility team has developed the Mozilla Accessibility Release Guidelines which outline what is needed to make user interfaces accessible:\\nhttps:\/\/wiki.mozilla.org\/Accessibility\/Guidelines\\nPlease describe the accessibility guidelines you considered and what steps you\'ve taken to address them:\\n\\nDescribe any areas of concern to which you want the accessibility team to give special attention:\"},\"cf_tracking_firefox_esr128\":{\"?\":\"[Tracking Requested - why for this release]:\"}},\"types\":[\"tracking\"]}"; var TrackingFlags = $.parseJSON(tracking_flags_str); BUGZILLA.bug_id = 565541; BUGZILLA.bug_title = '565541 - Web sites shouldn\'t be allowed to resize main window'; BUGZILLA.bug_summary = 'Web sites shouldn\'t be allowed to resize main window'; BUGZILLA.bug_url = 'https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=565541'; BUGZILLA.bug_keywords = 'dev-doc-complete, relnote, testcase', BUGZILLA.bug_secure = false; BUGZILLA.user = { id: 0, login: '', is_insider: false, is_timetracker: false, can_tag: false, can_triage: false, timezone: 'America\/Los_Angeles', settings: { quote_replies: 'quoted_reply', zoom_textareas: true, remember_collapsed: true, inline_attachments: true, autosize_comments: false }, cookie_consent: false }; review_suggestions = { _mentors: [ ], 'DOM: Core & HTML': [ ], _end: 1 }; static_component = 'DOM: Core & HTML'; </script> <script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/text-editor.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/BugModal/web/autosize.min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/ProdCompSearch/web/js/prod_comp_search.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/BugModal/web/attachments_overlay.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/BugModal/web/bug_modal.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/BugModal/web/comments.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/ComponentWatching/web/js/overlay.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/bugzilla-readable-status-min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/field.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/comments.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/util.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/TrackingFlags/web/js/flags.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/BMO/web/js/firefox-crash-table.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/MozChangeField/web/js/severity-s1-priority-p1.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/MozChangeField/web/js/clear-tracking-priority-s1.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/MozChangeField/web/js/set-tracking-severity-s1.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/lib/prism.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/consent.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/cookie-helper.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/js/lib/md5.min.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/Review/web/js/badge.js"></script><script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/Review/web/js/review.js"></script> <link href="/static/v20250219.1/skins/lib/fontawesome.min.css" rel="stylesheet" type="text/css"> <link href="/static/v20250219.1/skins/lib/fontawesome-brands.min.css" rel="stylesheet" type="text/css"> <link href="/static/v20250219.1/skins/lib/fontawesome-solid.min.css" rel="stylesheet" type="text/css"> <link rel="search" type="application/opensearchdescription+xml" title="Bugzilla@Mozilla" href="/search_plugin.cgi"><link rel="shortcut icon" href="/extensions/BMO/web/images/favicon.ico"> <link rel="icon" type="image/svg+xml" href="/extensions/BMO/web/images/favicon.svg"> <link rel="canonical" href="https://bugzilla.mozilla.org/show_bug.cgi?id=565541"> <link rel="shorturl" href="https://bugzilla.mozilla.org/565541"><meta name="robots" content="noarchive"> </head> <body class="bugzilla-mozilla-org skin-standard bug_modal"> <div id="wrapper"> <header id="header" role="banner" aria-label="Global Header"> <div class="inner" role="none"> <button type="button" class="iconic ghost" id="open-menu-drawer" aria-label="Open Site Menu"> <span class="icon" aria-hidden="true" data-icon="menu"></span> </button><div id="header-external-links" class="dropdown" role="none"> <button type="button" id="header-external-menu-button" class="dropdown-button minor" aria-label="Show Mozilla Menu" aria-expanded="false" aria-haspopup="true" aria-controls="header-external-menu"> <img src="/static/v20250219.1/extensions/BMO/web/images/moz-fav-one-color-white-rgb.svg" width="32" height="32" alt=""> </button> <ul class="dropdown-content right" id="header-external-menu" role="menu" aria-label="Mozilla Menu" style="display:none;"> <li role="none"> <a href="https://www.mozilla.org/" role="menuitem"> <span class="label" role="none">Mozilla Home</span> </a> </li> <li role="separator"></li> <li role="none"> <a href="https://www.mozilla.org/privacy/websites/" role="menuitem"> <span class="label" role="none">Privacy</span> </a> </li> <li role="none"> <a href="https://www.mozilla.org/privacy/websites/#cookies" role="menuitem"> <span class="label" role="none">Cookies</span> </a> </li> <li role="none"> <a href="https://www.mozilla.org/about/legal/" role="menuitem"> <span class="label" role="none">Legal</span> </a> </li> </ul> </div> <h1 id="header-title" class="title" role="none"> <a class="header-button" href="https://bugzilla.mozilla.org/home" title="Go to home page"> <span aria-label="Go to Bugzilla Home Page">Bugzilla</span> </a> </h1> <form id="header-search" class="quicksearch" action="/buglist.cgi" data-no-csrf role="search" aria-label="Search Bugs"> <button type="button" class="iconic ghost" id="show-searchbox" aria-label="Search Bugs"> <span class="icon" aria-hidden="true" data-icon="search"></span> </button> <div class="searchbox-outer dropdown" role="combobox" aria-label="Quick Search" aria-haspopup="listbox" aria-owns="header-search-dropdown" aria-expanded="false"> <span class="icon" aria-hidden="true" data-icon="search"></span> <input id="quicksearch_top" class="dropdown-button" name="quicksearch" autocomplete="off" value="" accesskey="s" placeholder="Search Bugs" title="Enter a bug number or some search terms" role="searchbox" aria-controls="header-search-dropdown" aria-label="Search Terms"><div id="header-search-dropdown" class="dropdown-content dropdown-panel right" role="listbox" style="display: none;"> <div id="header-search-dropdown-wrapper" role="none"> <section id="header-search-dropdown-help" role="group" aria-label="Help"> <footer role="none"> <a href="/page.cgi?id=quicksearch.html">Quick Search Tips</a> <a href="/query.cgi?format=advanced">Advanced Search</a> </footer> </section> </div> </div> </div> </form> <nav id="header-nav" role="menubar" aria-label="Site Links"> <ul class="links" role="none"><li role="none"> <a class="header-button" href="/describecomponents.cgi" title="Browse bugs by component" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="category"></span> <span class="label" role="none">Browse</span> </a> </li> <li role="none"> <a class="header-button" href="/query.cgi?format=advanced" title="Search bugs using various criteria" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="pageview"></span> <span class="label" role="none">Advanced Search</span> </a> </li> <li role="none"> <a class="header-button" href="/enter_bug.cgi" title="File a new bug" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="add_box"></span> <span class="label" role="none">New Bug</span> </a> </li> </ul> <div class="dropdown" role="none"> <button type="button" id="header-tools-menu-button" class="header-button dropdown-button minor" title="More tools…" role="menuitem" aria-label="Show More Tools Menu" aria-expanded="false" aria-haspopup="true" aria-controls="header-tools-menu"> <span class="icon" aria-hidden="true" data-icon="more_horiz"></span> </button> <ul class="dropdown-content left" id="header-tools-menu" role="menu" aria-label="More Tools Menu" style="display:none;"><li role="none"> <a href="/report.cgi" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="analytics"></span> <span class="label" role="none">Reports</span> </a> </li> <li role="separator"></li> <li role="none"> <a href="https://bmo.readthedocs.io/en/latest/" target="_blank" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="help"></span> <span class="label" role="none">Documentation</span> </a> </li> </ul> </div> </nav> <ul id="header-login" class="links" role="none"><li id="mini_login_container_top" role="none"> <a id="login_link_top" href="/index.cgi?GoAheadAndLogIn=1" class='show_mini_login_form header-button' data-qs-suffix="_top" role="button"> <span class="icon" aria-hidden="true" data-icon="login"></span> <span class="label" role="none">Log In</span> </a> <div id="mini_login_top" class="mini-popup mini_login bz_default_hidden"> <form method="post" action="/github.cgi"> <input type="hidden" name="github_token" value="RKP0lOrWcTgWA5PGqFxcjT9HqXIF7ixCrxSFZTpIAjAwOlhGPuc8gFbmXnSIXDVCJowmwYOleVzSZQbU4rRXc4Y91ujemfTVsIOhHnEYnENmnVjEE1Nn89pRNHUTiMdndAeqTxifrIibUR2ow9bE1brMBJ7B9llYTkfPXEvsRE2A0rMsM996tzEbRRsIvJG6aLSx2MrNPVGnEVOnEEeu10Xty8wyrWfXdw2IMT5a7d3eiQ1uDKHOegruXAkkAfy4"> <input type="hidden" name="target_uri" value="https://bugzilla.mozilla.org/show_bug.cgi"> <button type="submit"> <i class="fab fa-github"></i> Log In with GitHub </button> </form> <div class="method-separator">or</div> <form action="/show_bug.cgi?id=565541" method="POST" data-qs-suffix="_top"> <input id="Bugzilla_login_top" class="bz_login" name="Bugzilla_login" title="Login" placeholder="Email" aria-label="Email" type="email" required > <input class="bz_password" id="Bugzilla_password_top" name="Bugzilla_password" type="password" title="Password" placeholder="Password" aria-label="Password" required > <input class="bz_password bz_default_hidden bz_mini_login_help" type="text" id="Bugzilla_password_dummy_top" value="password" title="Password" > <span class="remember-outer"> <input type="checkbox" id="Bugzilla_remember_top" name="Bugzilla_remember" value="on" class="bz_remember" checked> <label for="Bugzilla_remember_top">Remember me</label> </span> <input type="hidden" name="Bugzilla_login_token" value="1740543889-goM4ASEjgz7YlcTRP10i4k5s5qiWd5C2CAUUOF1WHUg"> <input type="submit" name="GoAheadAndLogIn" value="Log In" id="log_in_top" class="check_mini_login_fields" data-qs-suffix="_top"> <a href="#" id="hide_mini_login_top" aria-label="Close" class="close-button hide_mini_login_form" data-qs-suffix="_top"> <span class="icon" aria-hidden="true"></span> </a> </form> <div class="footer"> <a href="/createaccount.cgi">Create an Account</a> · <a id="forgot_link_top" href="/index.cgi?GoAheadAndLogIn=1#forgot" class='show_forgot_form' data-qs-suffix="_top">Forgot Password</a> </div> </div> <div id="forgot_form_top" class="mini-popup mini_forgot bz_default_hidden"> <form action="/token.cgi" method="post"> <input type="email" name="loginname" size="20" placeholder="Email" aria-label="Email" required> <input id="forgot_button_top" value="Reset Password" type="submit"> <input type="hidden" name="a" value="reqpw"> <input type="hidden" id="token_top" name="token" value="1740543889-49wVFv2WhSfqiJqlyx3JLc6dfAtoIF0WHYMSaVIQn7s"> <a href="#" class="close-button hide_forgot_form" aria-label="Close" data-qs-suffix="_top"> <span class="icon" aria-hidden="true"></span> </a> </form> </div> </li> </ul> </div> <dialog id="menu-drawer" inert aria-label="Site Menu"> <div class="drawer-inner" role="none"> <div class="header" role="none"> <button type="button" class="iconic ghost" id="close-menu-drawer" aria-label="Close Site Menu"> <span class="icon" aria-hidden="true" data-icon="close"></span> </button> </div> <ul role="menu" aria-label="Site Links"><li role="none"> <a class="header-button" href="/describecomponents.cgi" title="Browse bugs by component" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="category"></span> <span class="label" role="none">Browse</span> </a> </li> <li role="none"> <a class="header-button" href="/query.cgi?format=advanced" title="Search bugs using various criteria" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="pageview"></span> <span class="label" role="none">Advanced Search</span> </a> </li> <li role="none"> <a class="header-button" href="/enter_bug.cgi" title="File a new bug" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="add_box"></span> <span class="label" role="none">New Bug</span> </a> </li><li role="none"> <a href="/report.cgi" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="analytics"></span> <span class="label" role="none">Reports</span> </a> </li> <li role="separator"></li> <li role="none"> <a href="https://bmo.readthedocs.io/en/latest/" target="_blank" role="menuitem"> <span class="icon" aria-hidden="true" data-icon="help"></span> <span class="label" role="none">Documentation</span> </a> </li> </ul> </div> </dialog> </header> <main id="bugzilla-body" tabindex="-1"> <aside id="message-container" role="complementary"> <noscript> <div class="noscript"> <div class="inner"> <p>Please enable JavaScript in your browser to use all the features on this site.</p> </div> </div> </noscript> </aside> <div id="main-inner"> <div role="toolbar" id="page-toolbar"> <div role="group" class="buttons"> <button type="button" id="copy-summary" class="secondary separate-dropdown-button-main" title="Copy bug number and summary to your clipboard">Copy Summary</button ><div id="copy-menu-dropdown" class="dropdown"><button type="button" id="copy-menu-btn" aria-haspopup="true" aria-label="View" aria-expanded="false" aria-controls="copy-menu" class="dropdown-button secondary separate-dropdown-button-arrow" title="More options for copy">▾</button> <ul class="dropdown-content left" id="copy-menu" role="menu" style="display:none;"> <li role="presentation"> <a id="copy-markdown-summary" role="menuitem" tabindex="-1">Markdown</a> </li> <li role="presentation"> <a id="copy-markdown-bug-number" role="menuitem" tabindex="-1">Markdown (bug number)</a> </li> <li role="presentation"> <a id="copy-text-summary" role="menuitem" tabindex="-1">Plain Text</a> </li> <li role="presentation"> <a id="copy-html-summary" role="menuitem" tabindex="-1">HTML</a> </li> </ul> </div> <div id="clip-container" style="display:none"><input type="text" id="clip"></div> <div class="dropdown"> <button type="button" id="action-menu-btn" aria-haspopup="true" aria-label="View" aria-expanded="false" aria-controls="action-menu" class="dropdown-button secondary">View ▾</button> <ul class="dropdown-content left" id="action-menu" role="menu" style="display:none;"> <li role="presentation"> <a id="action-reset" role="menuitem" tabindex="-1">Reset Sections</a> </li> <li role="presentation"> <a id="action-expand-all" role="menuitem" tabindex="-1">Expand All Sections</a> </li> <li role="presentation"> <a id="action-collapse-all" role="menuitem" tabindex="-1">Collapse All Sections</a> </li> <li role="separator"></li> <li role="presentation"> <a id="action-history" role="menuitem" tabindex="-1">History</a> </li> <li role="separator"></li> <li role="presentation"> <a href="/rest/bug/565541" role="menuitem" tabindex="-1">JSON</a> </li> <li role="presentation"> <a href="/show_bug.cgi?ctype=xml&id=565541" role="menuitem" tabindex="-1">XML</a> </li> </ul> </div> </div> </div> <div role="status" id="io-error" style="display:none"></div> <div role="status" id="floating-message" style="display:none"> <div id="floating-message-text"></div> </div> <section class="module" > <div class="module-content" > <div id="summary-container"> <div class="field bug_modal indent" id="field-status_summary" > <div class=" container"> <span id="field-value-status_summary"> <span class="bug-status-label text" data-status="closed">Closed</span> <span id="field-value-bug_id"> <a href="/show_bug.cgi?id=565541">Bug 565541</a> </span> <span class="bug-time-labels"> <span class="bug-time-label">Opened <span class="rel-time" title="2010-05-12 17:38 PDT" data-time="1273711081">15 years ago</span></span> <span class="bug-time-label">Closed <span class="rel-time" title="2011-06-01 01:31 PDT" data-time="1306917117">14 years ago</span></span> </span> </span> </div> </div> <div class="field bug_modal indent edit-hide" > <div class=" container"> <h1 id="field-value-short_desc">Web sites shouldn't be allowed to resize main window</h1> </div> </div> <div class="field bug_modal edit-show" id="field-short_desc" style="display:none" > <div class="name"> <span class="required_star edit-show" style="display:none" aria-label="Required Field">*</span> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#short_desc" id="short_desc-help-link" class="help">Summary: </a> </div> <div class="value"> <span id="field-value-short_desc"> Web sites shouldn't be allowed to resize main window </span> </div> </div> </div> </div> </section> <section class="module" id="module-categories" > <header id="module-categories-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Categories section" data-label-collapsed="Expand Categories section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-categories-content" aria-expanded="true" aria-labeledby="module-categories-title" aria-describedby="module-categories-subtitle"></div> <h2 class="module-title" id="module-categories-title">Categories</h2> <h3 class="module-subtitle" id="module-categories-subtitle"> (Core :: DOM: Core & HTML, defect) </h3> </div> </header> <div class="module-content" id="module-categories-content" ><div class="fields-lhs"> <div class="field bug_modal" id="field-product" > <div class="name"> <a href="/describecomponents.cgi?product=Core" id="product-help-link" class="help">Product: </a> </div> <div class="value"> <span id="field-value-product"> <div class="name-info-outer dropdown"> <span id="product-name" class="dropdown-button" tabindex="0" role="button" aria-haspopup="menu" aria-controls="product-info">Core <span class="icon" aria-hidden="true">▾</span> </span> <aside id="product-info" class="name-info-popup dropdown-content right hover-display" hidden role="menu" aria-label="Product description and actions"> <header> <div class="title">Core</div> <div class="description">Shared components used by Firefox and other Mozilla software, including handling of Web content; Gecko, HTML, CSS, layout, DOM, scripts, images, networking, etc. Issues with web page layout probably go here, while Firefox user interface issues belong in the <a href="https://bugzilla.mozilla.org/describecomponents.cgi?product=Firefox">Firefox</a> product. (<a href="https://wiki.mozilla.org/Modules/All#Core">More info</a>)</div> </header> <li role="separator"></li> <div class="actions"> <div><a href="/buglist.cgi?product=Core&bug_status=__open__" target="_blank" role="menuitem" tabindex="-1">See Open Bugs in This Product</a></div> <div><a href="/enter_bug.cgi?product=Core" target="_blank" role="menuitem" tabindex="-1">File New Bug in This Product</a></div> <div><button disabled type="button" class="secondary component-watching" role="menuitem" tabindex="-1" data-product="Core" data-label-watch="Watch This Product" data-label-unwatch="Unwatch This Product" data-source="BugModal">Watch This Product</button></div> </div> </aside> </div> </span> </div> </div> <div class="field bug_modal" id="field-component" > <div class="name"> <a href="/describecomponents.cgi?product=Core&component=DOM%3A%20Core%20%26%20HTML#DOM%3A%20Core%20%26%20HTML" id="component-help-link" class="help">Component: </a> </div> <div class="value"> <span id="field-value-component"> <div class="name-info-outer dropdown"> <span id="component-name" class="dropdown-button" tabindex="0" role="button" aria-haspopup="menu" aria-controls="component-info">DOM: Core & HTML <span class="icon" aria-hidden="true">▾</span> </span> <aside id="component-info" class="name-info-popup dropdown-content right hover-display" hidden role="menu" aria-label="Component description and actions"> <header> <div class="title">Core :: DOM: Core & HTML</div> <div class="description">Issues in DOM tree <a href="https://dom.spec.whatwg.org/">https://dom.spec.whatwg.org</a> & HTML <a href="https://html.spec.whatwg.org/">https://html.spec.whatwg.org</a> that do not fit into any other DOM or HTML component or which span multiple DOM or HTML components.</div> </header> <li role="separator"></li> <div class="actions"> <div><a href="/buglist.cgi?product=Core&component=DOM%3A%20Core%20%26%20HTML&bug_status=__open__" target="_blank" role="menuitem" tabindex="-1">See Open Bugs in This Component</a></div> <div><a href="/buglist.cgi?product=Core&component=DOM%3A%20Core%20%26%20HTML&chfield=resolution&chfieldfrom=-6m&chfieldvalue=FIXED&bug_status=__closed__" target="_blank" role="menuitem" tabindex="-1">Recently Fixed Bugs in This Component</a></div> <div><a href="/enter_bug.cgi?product=Core&component=DOM%3A%20Core%20%26%20HTML" target="_blank" role="menuitem" tabindex="-1">File New Bug in This Component</a></div> <div><button disabled type="button" class="secondary component-watching" role="menuitem" tabindex="-1" data-product="Core" data-component="DOM: Core & HTML" data-label-watch="Watch This Component" data-label-unwatch="Unwatch This Component" data-source="BugModal">Watch This Component</button></div> </div> </aside> </div> </span> </div> </div> <div class="field bug_modal edit-show" id="field-version" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#version" id="version-help-link" class="help">Version: </a> </div> <div class="value"> <span id="field-value-version"> Trunk </span> </div> </div> <div class="field bug_modal edit-show" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#rep_platform" id="-help-link" class="help">Platform: </a> </div> <div class=" container"><div class="field bug_modal inline" id="field-rep_platform" > <div class="value"> <span id="field-value-rep_platform"> All </span> </div> </div><div class="field bug_modal indent inline" id="field-op_sys" > <div class="value"> <span id="field-value-op_sys"> All </span> </div> </div><div class="field bug_modal" > <div class=" container"> </div> </div> </div> </div> </div><div class="fields-rhs"> <div class="field bug_modal contains-buttons" id="field-bug_type" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#bug_type" id="bug_type-help-link" class="help">Type: </a> </div> <div class="value"> <span id="field-value-bug_type"> <span class="bug-type-label iconic-text" data-type="defect"> <span class="icon" aria-hidden="true"></span>defect</span> </span> </div> </div> <div class="field bug_modal" id="field-importance" > <div class=" container"> <span id="field-value-importance"><div class="field bug_modal inline" id="field-priority" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#priority" id="priority-help-link" class="help">Priority: </a> </div> <div class="value"> <span id="field-value-priority"> <em>Not set</em> </span> </div> </div><div class="field bug_modal inline" id="field-bug_severity" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#bug_severity" id="bug_severity-help-link" class="help">Severity: </a> </div> <div class="value"> <span id="field-value-bug_severity"> normal </span> </div> </div> </span> </div> </div> <div class="field bug_modal edit-show" id="field-cf_fx_points" style="display:none" > <div class="name"> Points: </div> <div class="value"> <span id="field-value-cf_fx_points"> --- </span> </div> </div> </div> </div> </section> <section class="module" id="module-tracking" > <header id="module-tracking-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Tracking section" data-label-collapsed="Expand Tracking section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-tracking-content" aria-expanded="true" aria-labeledby="module-tracking-title" aria-describedby="module-tracking-subtitle"></div> <h2 class="module-title" id="module-tracking-title">Tracking</h2> <h3 class="module-subtitle" id="module-tracking-subtitle"> (<span id="readable-bug-status" data-readable-bug-status="{"priority":"--","cf_webcompat_score":"---","cf_status_firefox_esr115":"---","target_milestone":"mozilla7","cf_tracking_thunderbird_esr115":"---","cf_status_thunderbird_esr128":"---","status":"VERIFIED","cf_tracking_firefox135":"---","cf_tracking_firefox_relnote":"---","flags":[{"name":"in-testsuite","status":"+"}],"resolution":"FIXED","cf_performance_impact":"---","dupe_of":null,"cf_tracking_thunderbird_esr128":"---","cf_status_firefox135":"---","cf_tracking_firefox_esr115":"---","cf_webcompat_priority":"---","id":565541,"cf_accessibility_severity":"---","cf_status_firefox137":"---","cf_a11y_review_project_flag":"---","cf_status_firefox_esr128":"---","cf_tracking_firefox_esr128":"---","cf_tracking_firefox7":"+","cf_status_firefox136":"---","cf_status_thunderbird_esr115":"---","cf_tracking_firefox137":"---","keywords":["dev-doc-complete","relnote","testcase"],"cf_tracking_firefox136":"---"}"></span>) </h3> </div> </header> <div class="module-content" id="module-tracking-content" ><div class="fields-lhs"> <div class="field bug_modal edit-hide" id="field-status-view" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugStatuses" id="status-view-help-link" class="help">Status: </a> </div> <div class=" container"> <span id="field-value-status-view">VERIFIED FIXED </span> </div> </div> <div class="field bug_modal edit-show" id="field-status-edit" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugStatuses" id="status-edit-help-link" class="help">Status: </a> </div> <div class=" container"> <span id="field-value-status-edit"><div class="field bug_modal inline" id="field-bug_status" > <div class="value"> <span id="field-value-bug_status"> VERIFIED </span> </div> </div><div class="field bug_modal indent inline" id="field-resolution" > <div class="value"> <span id="field-value-resolution"> FIXED </span> </div> </div> <div id="status-action-buttons"> <div id="assigned-container" style="display:none"> <button type="button" class="secondary" id="mark-as-assigned-btn"> Mark as Assigned </button> </div> </div> </span> </div> </div> <div class="field bug_modal" id="field-target_milestone" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#target_milestone" id="target_milestone-help-link" class="help">Milestone: </a> </div> <div class="value"> <span id="field-value-target_milestone"> mozilla7 </span> </div> </div> <div class="field bug_modal edit-show" id="field-cf_fx_iteration" style="display:none" > <div class="name"> Iteration: </div> <div class="value"> <span id="field-value-cf_fx_iteration"> --- </span> </div> </div> <div class="field bug_modal edit-show" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide#Project_Flags" id="-help-link" class="help">Project Flags: </a> </div> <div class=" container"><div class="flags edit-show" style="display:none"> <table class="layout-table tracking-flags"> <tr> <td class="tracking-flag-name">a11y-review</td> <td class="tracking-flag-status"><input type="hidden" id="cf_a11y_review_project_flag-dirty"> <select id="cf_a11y_review_project_flag" name="cf_a11y_review_project_flag"> <option value="---" id="v4876_cf_a11y_review_project_flag" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">Webcompat Priority</td> <td class="tracking-flag-status"><input type="hidden" id="cf_webcompat_priority-dirty"> <select id="cf_webcompat_priority" name="cf_webcompat_priority"> <option value="---" id="v4274_cf_webcompat_priority" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">Webcompat Score</td> <td class="tracking-flag-status"><input type="hidden" id="cf_webcompat_score-dirty"> <select id="cf_webcompat_score" name="cf_webcompat_score"> <option value="---" id="v6757_cf_webcompat_score" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">Accessibility Severity</td> <td class="tracking-flag-status"><input type="hidden" id="cf_accessibility_severity-dirty"> <select id="cf_accessibility_severity" name="cf_accessibility_severity"> <option value="---" id="v6045_cf_accessibility_severity" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">Performance Impact</td> <td class="tracking-flag-status"><input type="hidden" id="cf_performance_impact-dirty"> <select id="cf_performance_impact" name="cf_performance_impact"> <option value="---" id="v5427_cf_performance_impact" selected >--- </option> </select></td> </tr> </table> </div> </div> </div> </div><div class="fields-rhs"> <div class="field tracking-flags-wrapper" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide#Tracking_Flags" id="-help-link" class="help">Tracking Flags: </a> </div> <div class=" container"><div class="flags edit-hide"> <table class="layout-table tracking-flags"> <tr> <th></th> <th>Tracking</th> <th>Status</th> </tr> <tr> <td class="tracking-flag-name">firefox7</td> <td class="tracking-flag-tracking"> <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=equals&v1=%2B">+</a> </td> <td class="tracking-flag-status">--- </td> </tr> </table> </div> <div class="flags edit-show" style="display:none"> <table class="layout-table tracking-flags"> <tr> <th></th> <th>Tracking</th> <th>Status</th> </tr> <tr> <td class="tracking-flag-name">firefox7</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox7-dirty"> <select id="cf_tracking_firefox7" name="cf_tracking_firefox7"> <option value="+" id="v116_cf_tracking_firefox7" selected >+ </option> </select></td> <td class="tracking-flag-status"></td> </tr> <tr> <td class="tracking-flag-name">relnote-firefox</td> <td class="tracking-flag-tracking"></td> <td class="tracking-flag-status"><input type="hidden" id="cf_tracking_firefox_relnote-dirty"> <select id="cf_tracking_firefox_relnote" name="cf_tracking_firefox_relnote"> <option value="---" id="v539_cf_tracking_firefox_relnote" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">thunderbird_esr115</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_thunderbird_esr115-dirty"> <select id="cf_tracking_thunderbird_esr115" name="cf_tracking_thunderbird_esr115"> <option value="---" id="v6094_cf_tracking_thunderbird_esr115" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_thunderbird_esr115-dirty"> <select id="cf_status_thunderbird_esr115" name="cf_status_thunderbird_esr115"> <option value="---" id="v6100_cf_status_thunderbird_esr115" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">thunderbird_esr128</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_thunderbird_esr128-dirty"> <select id="cf_tracking_thunderbird_esr128" name="cf_tracking_thunderbird_esr128"> <option value="---" id="v6557_cf_tracking_thunderbird_esr128" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_thunderbird_esr128-dirty"> <select id="cf_status_thunderbird_esr128" name="cf_status_thunderbird_esr128"> <option value="---" id="v6576_cf_status_thunderbird_esr128" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">firefox-esr115</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox_esr115-dirty"> <select id="cf_tracking_firefox_esr115" name="cf_tracking_firefox_esr115"> <option value="---" id="v6079_cf_tracking_firefox_esr115" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_firefox_esr115-dirty"> <select id="cf_status_firefox_esr115" name="cf_status_firefox_esr115"> <option value="---" id="v6084_cf_status_firefox_esr115" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">firefox-esr128</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox_esr128-dirty"> <select id="cf_tracking_firefox_esr128" name="cf_tracking_firefox_esr128"> <option value="---" id="v6501_cf_tracking_firefox_esr128" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_firefox_esr128-dirty"> <select id="cf_status_firefox_esr128" name="cf_status_firefox_esr128"> <option value="---" id="v6505_cf_status_firefox_esr128" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">firefox135</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox135-dirty"> <select id="cf_tracking_firefox135" name="cf_tracking_firefox135"> <option value="---" id="v6816_cf_tracking_firefox135" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_firefox135-dirty"> <select id="cf_status_firefox135" name="cf_status_firefox135"> <option value="---" id="v6821_cf_status_firefox135" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">firefox136</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox136-dirty"> <select id="cf_tracking_firefox136" name="cf_tracking_firefox136"> <option value="---" id="v6838_cf_tracking_firefox136" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_firefox136-dirty"> <select id="cf_status_firefox136" name="cf_status_firefox136"> <option value="---" id="v6843_cf_status_firefox136" selected >--- </option> </select></td> </tr> <tr> <td class="tracking-flag-name">firefox137</td> <td class="tracking-flag-tracking"><input type="hidden" id="cf_tracking_firefox137-dirty"> <select id="cf_tracking_firefox137" name="cf_tracking_firefox137"> <option value="---" id="v6869_cf_tracking_firefox137" selected >--- </option> </select></td> <td class="tracking-flag-status"><input type="hidden" id="cf_status_firefox137-dirty"> <select id="cf_status_firefox137" name="cf_status_firefox137"> <option value="---" id="v6874_cf_status_firefox137" selected >--- </option> </select></td> </tr> </table> </div> </div> </div> </div> </div> </section> <section class="module" id="module-people" > <header id="module-people-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse People section" data-label-collapsed="Expand People section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-people-content" aria-expanded="false" aria-labeledby="module-people-title" aria-describedby="module-people-subtitle"></div> <h2 class="module-title" id="module-people-title">People</h2> <h3 class="module-subtitle" id="module-people-subtitle"> (Reporter: jhill, Assigned: mounir) </h3> </div> </header> <div class="module-content" id="module-people-content" style="display:none" ><div class="fields-lhs"> <div class="field bug_modal edit-hide" id="field-assigned_to" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#assigned_to" id="assigned_to-help-link" class="help">Assignee: </a> </div> <div class="value"> <span id="field-value-assigned_to"><div class="vcard vcard_342786" ><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=40" class="gravatar" width="20" height="20"> <a class="email " href="/user_profile?user_id=342786" > <span class="fna">mounir</span></a> </div> </span> </div> </div><div class="field bug_modal edit-show" id="field-assigned_to" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#assigned_to" id="assigned_to-help-link" class="help">Assignee: </a> </div> <div class="value"> <span id="field-value-assigned_to"> <div class="set-default-container" style="display:none"> <input type="checkbox" id="set-default-assignee" name="set_default_assignee" class="set-default" value="1" data-for="assigned_to"> <label for="set-default-assignee">Reset Assignee to default</label> </div> </span> </div> </div> <div class="field bug_modal edit-show" id="field-bug_mentors" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#bug_mentor" id="bug_mentors-help-link" class="help">Mentors: </a> </div> <div class="value"> <span id="field-value-bug_mentors">--- </span> </div> </div> <div class="field bug_modal edit-show" id="field-qa_contact" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#qa_contact" id="qa_contact-help-link" class="help">QA Contact: </a> </div> <div class="value"> <span id="field-value-qa_contact"> <div class="set-default-container" style="display:none"> <input type="checkbox" id="set-default-qa-contact" name="set_default_qa_contact" class="set-default" value="1" data-for="qa_contact"> <label for="set-default-qa-contact">Reset QA Contact to default</label> </div> </span> </div> </div> </div><div class="fields-rhs"> <div class="field bug_modal" id="field-reporter" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#reporter" id="reporter-help-link" class="help">Reporter: </a> </div> <div class="value"> <span id="field-value-reporter"> <div class="vcard vcard_382626" ><img src="https://secure.gravatar.com/avatar/aff8f81f9131e8abb3ef166dfeac3193?d=mm&size=40" class="gravatar" width="20" height="20"> <a class="email disabled" href="/user_profile?user_id=382626" > <span class="fna">jhill</span></a> </div> </span> </div> </div> <div class="field bug_modal" id="field-triage_owner" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#triage_owner" id="triage_owner-help-link" class="help">Triage Owner: </a> </div> <div class="value"> <span id="field-value-triage_owner"> <div class="vcard vcard_34283" ><img src="https://secure.gravatar.com/avatar/900caab146bc7a489b3854cf10acf93f?d=mm&size=40" class="gravatar" width="20" height="20"> <a class="email " href="/user_profile?user_id=34283" > <span class="fna">masayuki</span></a> </div> </span> </div> </div> <div class="field bug_modal" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#cc" id="-help-link" class="help">CC: </a> </div> <div class=" container"> <span aria-owns="cc-summary cc-latch"> <span role="button" tabindex="0" id="cc-summary" data-count="42">42 people </span> </span> <div id="cc-list" style="display:none"></div> </div> </div> </div> </div> </section> <section class="module" id="module-references" > <header id="module-references-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse References section" data-label-collapsed="Expand References section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-references-content" aria-expanded="false" aria-labeledby="module-references-title" aria-describedby="module-references-subtitle"></div> <h2 class="module-title" id="module-references-title">References</h2> <h3 class="module-subtitle" id="module-references-subtitle"> (Blocks 2 open bugs, <div class="link"> <a href="javascript:resizeTo(300,300)" target="_blank" rel="noreferrer" title="javascript:resizeTo(300,300)" class="bug-url" data-safe="0">URL</a> </div>) </h3> </div> </header> <div class="module-content" id="module-references-content" style="display:none" ><div class="fields-lhs"> <div class="field bug_modal bug-list" id="field-dependson" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#dependson" id="dependson-help-link" class="help">Depends on: </a> </div> <div class="value"> <span id="field-value-dependson"> <div class="bug-list"> <span class="bug-type-label iconic" title="defect" aria-label="defect" data-type="defect"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED WONTFIX - Set dom.disable_window_move_resize to true by default" href="/show_bug.cgi?id=328492">328492</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED WONTFIX - Default dom.disable_window_move_resize to true" href="/show_bug.cgi?id=454779">454779</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INVALID - window.resizeTo and window.moveTo don't work" href="/show_bug.cgi?id=688841">688841</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INVALID - resizeTo and resizeBy do nothing" href="/show_bug.cgi?id=689974">689974</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Clarify popup-only move/resize window preference label" href="/show_bug.cgi?id=690648">690648</a>, <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED INVALID - Window resizing from JS (moveTo, resizeTo, etc) doesn't work when Firebug is installed" href="/show_bug.cgi?id=691693">691693</a>, <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - [SeaMonkey] permanent "dom/tests/mochitest/bugs/test_resize_move_windows.html | Test timed out."" href="/show_bug.cgi?id=725015">725015</a> </div> </span> </div> </div><div class="field bug_modal bug-list" id="field-blocked" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#blocks" id="blocked-help-link" class="help">Blocks: </a> </div> <div class="value"> <span id="field-value-blocked"> <div class="bug-list"> <span class="bug-type-label iconic" title="defect" aria-label="defect" data-type="defect"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_NEW" title="NEW - [meta] Paper cuts: Being in Control" href="/show_bug.cgi?id=565512">cuts-control</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Malicious web site resizes Firefox and calls alert(), making it seem as if Firefox has crashed and offering a sketchy "solution"" href="/show_bug.cgi?id=402401">402401</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - test_resize_move_windows.xul fails on an ubuntu 12.04 VM, causes 45 other failures" href="/show_bug.cgi?id=834716">834716</a> </div> <div class="bug-list"> <span class="bug-type-label iconic" title="task" aria-label="task" data-type="task"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_NEW" title="NEW - [meta] Protect users from websites that trap them or destroy their experience" href="/show_bug.cgi?id=432687">eviltraps</a> </div> </span> </div> </div><div class="field bug_modal" id="field-dependencytree" > <div class="name"> </div> <div class=" container"> <span id="field-value-dependencytree"> Dependency <a href="/showdependencytree.cgi?id=565541&hide_resolved=1">tree</a> / <a href="/showdependencygraph.cgi?id=565541">graph</a> </span> </div> </div> <div class="field bug_modal bug-list edit-show" id="field-regresses" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#regresses" id="regresses-help-link" class="help">Regressions: </a> </div> <div class="value"> <span id="field-value-regresses"> --- </span> </div> </div><div class="field bug_modal bug-list edit-show" id="field-regressed_by" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#regressed_by" id="regressed_by-help-link" class="help">Regressed by: </a> </div> <div class="value"> <span id="field-value-regressed_by"> --- </span> </div> </div> <div class="field bug_modal bug-list" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#duplicates" id="-help-link" class="help">Duplicates: </a> </div> <div class="value"> <div class="bug-list"> <span class="bug-type-label iconic" title="defect" aria-label="defect" data-type="defect"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - javascript window resize shouldn't work when more than one tab" href="/show_bug.cgi?id=144069">144069</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - javascript functions like resizeTo(); should be ignored in fullscreen mode" href="/show_bug.cgi?id=349637">349637</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - Documents in background tabs should not be able to move/resize windows" href="/show_bug.cgi?id=363781">363781</a> </div> <div class="bug-list"> <span class="bug-type-label iconic" title="enhancement" aria-label="enhancement" data-type="enhancement"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - restrict move/resize windows similarly to window.close()" href="/show_bug.cgi?id=458826">458826</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - Disable website window resizing by default" href="/show_bug.cgi?id=650711">650711</a> </div> </div> </div> </div><div class="fields-rhs"> <div class="field bug_modal" id="field-bug_file_loc" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#bug_file_loc" id="bug_file_loc-help-link" class="help">URL: </a> </div> <div class="value"> <span id="field-value-bug_file_loc"><div class="link"> <a href="javascript:resizeTo(300,300)" target="_blank" rel="noreferrer" title="javascript:resizeTo(300,300)" class="bug-url" data-safe="0">javascript:resizeTo(300,300)</a> </div> </span> </div> </div> <div class="field bug_modal" id="field-see_also" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#see_also" id="see_also-help-link" class="help">See Also: </a> </div> <div class="value"> <span id="field-value-see_also"> <div class="bug-list"> <span class="bug-type-label iconic" title="enhancement" aria-label="enhancement" data-type="enhancement"> <span class="icon" aria-hidden="true"></span> </span><a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">502561</a> </div> </span> </div> </div> </div> </div> </section> <section class="module" id="module-details" > <header id="module-details-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Details section" data-label-collapsed="Expand Details section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-details-content" aria-expanded="false" aria-labeledby="module-details-title" aria-describedby="module-details-subtitle"></div> <h2 class="module-title" id="module-details-title">Details</h2> <h3 class="module-subtitle" id="module-details-subtitle"> (Keywords: dev-doc-complete, relnote, testcase, Whiteboard: potential website fallout from new feature (for docs, see comment 24)) </h3> </div> </header> <div class="module-content" id="module-details-content" style="display:none" ><div class="fields-lhs"> <div class="field bug_modal edit-show" id="field-alias" style="display:none" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#alias" id="alias-help-link" class="help">Alias: </a> </div> <div class="value"> <span id="field-value-alias"> --- </span> </div> </div> <div class="field bug_modal" id="field-keywords" > <div class="name"> <a href="/describekeywords.cgi" id="keywords-help-link" class="help">Keywords: </a> </div> <div class="value"> <span id="field-value-keywords"> <a href="/buglist.cgi?keywords=dev-doc-complete&resolution=---">dev-doc-complete</a>, <a href="/buglist.cgi?keywords=relnote&resolution=---">relnote</a>, <a href="/buglist.cgi?keywords=testcase&resolution=---">testcase</a> </span> </div> </div> <div class="field bug_modal" id="field-status_whiteboard" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/Whiteboard" id="status_whiteboard-help-link" class="help">Whiteboard: </a> </div> <div class="value"> <span id="field-value-status_whiteboard">potential website fallout from new feature (for docs, see comment 24) </span> </div> </div><div class="field bug_modal edit-show" id="field-cf_qa_whiteboard" style="display:none" > <div class="name"> QA Whiteboard: </div> <div class="value"> <span id="field-value-cf_qa_whiteboard"> --- </span> </div> </div> <div class="field bug_modal edit-show" id="field-cf_has_str" style="display:none" > <div class="name"> Has STR: </div> <div class="value"> <span id="field-value-cf_has_str"> --- </span> </div> </div><div class="field bug_modal edit-show" id="field-cf_cab_review" style="display:none" > <div class="name"> Change Request: </div> <div class="value"> <span id="field-value-cf_cab_review"> --- </span> </div> </div> <div class="field bug_modal" id="field-votes" > <div class="name"> <a href="https://wiki.mozilla.org/BMO/UserGuide/BugFields#votes" id="votes-help-link" class="help">Votes: </a> </div> <div class=" container"> <span id="field-value-votes">8 </span> </div> </div> </div><div class="fields-rhs"> <div class="field bug_modal" id="field-bug_flags" > <div class="name"> Bug Flags: </div> <div class=" container"> <span id="field-value-bug_flags"><div id="bug-flags" class="flags"> <table class="layout-table"> <tbody class="edit-hide"><tr> <td class="flag-setter"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">mounir</span></a> </div> </td> <td class="flag-name"> <a href="#c29" class="rel-time-title activity-ref" title="14 years ago" data-time="1306878808" >in-testsuite</a> </td> <td class="flag-value">+ </td> </tr> </tbody> <tbody class="edit-show" style="display:none"><tr> <td class="flag-setter"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">mounir</span></a> </div> </td> <td class="flag-name"> <label title="Whether the bug has a testcase in the test suite or not. Set it to "in-testsuite?" if the bug needs a testcase (only set this if the bug actually *needs* a testcase - not all bugs do, even layout bugs!), set it to "in-testsuite+" if the bug has an appropriate testcase, and set it to "in-testsuite-" if the bug doesn't need an explicit testcase (e.g. for code cleanup bugs). Only QA actively working on test cases in the component should use this keyword." for="flag-447731">in-testsuite</label> </td> <td class="flag-value"> <input type="hidden" id="flag-447731-dirty"> <select id="flag-447731" name="flag-447731" title="Whether the bug has a testcase in the test suite or not. Set it to "in-testsuite?" if the bug needs a testcase (only set this if the bug actually *needs* a testcase - not all bugs do, even layout bugs!), set it to "in-testsuite+" if the bug has an appropriate testcase, and set it to "in-testsuite-" if the bug doesn't need an explicit testcase (e.g. for code cleanup bugs). Only QA actively working on test cases in the component should use this keyword." disabled class="bug-flag"> <option value="+" selected>+</option> </select> </td> </tr> </tbody> <tbody class="edit-show" style="display:none"><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="Is this bug/feature enabled in a release by a pref flag?" for="flag_type-930">behind-pref</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-930-dirty"> <select id="flag_type-930" name="flag_type-930" title="Is this bug/feature enabled in a release by a pref flag?" disabled class="bug-flag"> <option value="X"></option> </select> </td> </tr><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="Flag tracking inclusion in the desktop Firefox product backlog." for="flag_type-846">firefox-backlog</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-846-dirty"> <select id="flag_type-846" name="flag_type-846" title="Flag tracking inclusion in the desktop Firefox product backlog." disabled class="bug-flag"> <option value="X"></option> </select> </td> </tr><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="Flag is used to track security bug bounty nominations. Mail security(at)mozilla.org to nominate a bug." for="flag_type-803">sec-bounty</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-803-dirty"> <select id="flag_type-803" name="flag_type-803" title="Flag is used to track security bug bounty nominations. Mail security(at)mozilla.org to nominate a bug." class="bug-flag"> <option value="X"></option> <option value="?" >?</option> </select> </td> </tr><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="Flag is used to track whether the bug report is eligible for inclusion in the Bug Bounty Hall of Fame." for="flag_type-913">sec-bounty-hof</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-913-dirty"> <select id="flag_type-913" name="flag_type-913" title="Flag is used to track whether the bug report is eligible for inclusion in the Bug Bounty Hall of Fame." disabled class="bug-flag"> <option value="X"></option> </select> </td> </tr><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="Whether the bug has a testcase in the qa test suite or not. Set it to "in-qa-testsuite?" if the bug needs a testcase (only set this if the bug actually *needs* a testcase - not all bugs do, even layout bugs!), set it to "in-qa-testsuite+" if the bug has an appropriate testcase, and set it to "in-qa-testsuite-" if the bug doesn't need an explicit testcase (e.g. for code cleanup bugs). Only QA actively working on test cases in the component should use this keyword." for="flag_type-787">in-qa-testsuite</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-787-dirty"> <select id="flag_type-787" name="flag_type-787" title="Whether the bug has a testcase in the qa test suite or not. Set it to "in-qa-testsuite?" if the bug needs a testcase (only set this if the bug actually *needs* a testcase - not all bugs do, even layout bugs!), set it to "in-qa-testsuite+" if the bug has an appropriate testcase, and set it to "in-qa-testsuite-" if the bug doesn't need an explicit testcase (e.g. for code cleanup bugs). Only QA actively working on test cases in the component should use this keyword." disabled class="bug-flag"> <option value="X"></option> </select> </td> <td class="flag-requestee"> <div id="requestee_type-787-container" style="display:none"><input name="requestee_type-787" value="" class="requestee bz_autocomplete_user" id="requestee_type-787" > </div> <td> </tr><tr> <td class="flag-setter"> </td> <td class="flag-name"> <label title="qe-verify: + ➜ request to verify the bug manually qe-verify: – ➜ the bug will not/can not be verified manually" for="flag_type-864">qe-verify</label> </td> <td class="flag-value"> <input type="hidden" id="flag_type-864-dirty"> <select id="flag_type-864" name="flag_type-864" title="qe-verify: + ➜ request to verify the bug manually qe-verify: – ➜ the bug will not/can not be verified manually" disabled class="bug-flag"> <option value="X"></option> </select> </td> </tr> </tbody> </table> </div> </span> </div> </div> </div> </div> </section> <section class="module edit-show" style="display:none" id="module-crash-data" > <header id="module-crash-data-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Crash Data section" data-label-collapsed="Expand Crash Data section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-crash-data-content" aria-expanded="false" aria-labeledby="module-crash-data-title" aria-describedby="module-crash-data-subtitle"></div> <h2 class="module-title" id="module-crash-data-title">Crash Data</h2> </div> </header> <div class="module-content" id="module-crash-data-content" style="display:none" ><div class="field bug_modal edit-show" id="field-cf_crash_signature" style="display:none" > <div class="name"> Signature: </div> <div class="value"> <span id="field-value-cf_crash_signature"> <em>None</em> </span> </div> </div> </div> </section> <section class="module edit-show" style="display:none" id="module-security" > <header id="module-security-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Security section" data-label-collapsed="Expand Security section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-security-content" aria-expanded="false" aria-labeledby="module-security-title" aria-describedby="module-security-subtitle"></div> <h2 class="module-title" id="module-security-title">Security</h2> <h3 class="module-subtitle" id="module-security-subtitle"> (public) </h3> </div> </header> <div class="module-content" id="module-security-content" style="display:none" ><div class="groups edit-hide"> This bug is publicly visible. </div> <div class="groups edit-show" style="display:none"> </div> </div> </section> <section class="module edit-show" style="display:none" id="module-user-story" data-non-stick="1" > <header id="module-user-story-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse User Story section" data-label-collapsed="Expand User Story section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-user-story-content" aria-expanded="false" aria-labeledby="module-user-story-title" aria-describedby="module-user-story-subtitle"></div> <h2 class="module-title" id="module-user-story-title">User Story</h2> </div> </header> <div class="module-content" id="module-user-story-content" style="display:none" > <pre id="user-story"></pre> </div> </section> <section class="module" id="module-attachments" > <header id="module-attachments-header" class="module-header"> <div class="module-latch" data-label-expanded="Collapse Attachments section" data-label-collapsed="Expand Attachments section"> <div class="module-spinner" role="button" tabindex="0" aria-controls="module-attachments-content" aria-expanded="true" aria-labeledby="module-attachments-title" aria-describedby="module-attachments-subtitle"></div> <h2 class="module-title" id="module-attachments-title">Attachments</h2> <h3 class="module-subtitle" id="module-attachments-subtitle"> (3 files, 4 obsolete files) </h3> </div> </header> <div class="module-content" id="module-attachments-content" ><table role="table" class="responsive" id="attachments"> <tr data-attachment-id="519509" class=" attach-obsolete attach-patch " style="display:none"> <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=519509" > Simply check that the caller is the opener </a> </div> <div> <a href="#c5" class="attach-time activity-ref"><span class="rel-time" title="2011-03-15 14:13 PDT" data-time="1300223613">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">2.05 KB, patch </div> </td> <td></td> <td class="attach-actions"> <a href="/attachment.cgi?id=519509&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=519509&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519509">Splinter Review</a> </tr> <tr data-attachment-id="519510" class=" " > <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=519510" > testcase </a> </div> <div> <a href="#c6" class="attach-time activity-ref"><span class="rel-time" title="2011-03-15 14:17 PDT" data-time="1300223833">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">644 bytes, text/html </div> </td> <td></td> <td class="attach-actions"> <a href="/attachment.cgi?id=519510&action=edit" data-details="1">Details</a> </tr> <tr data-attachment-id="519630" class=" attach-obsolete attach-patch " style="display:none"> <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=519630" > Part 1 - Limit move/resize actions to the opener of the window. </a> </div> <div> <a href="#c11" class="attach-time activity-ref"><span class="rel-time" title="2011-03-16 06:25 PDT" data-time="1300281927">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">13.70 KB, patch </div> </td> <td> <div class="attach-flag"><div class="vcard vcard_12352" ><span class="fn">jst</span> </div>: <a href="#a26601408_12352" class="flag-name-status rel-time-title activity-ref" title="14 years ago" data-time="1300281927" > review+</a> </div></td> <td class="attach-actions"> <a href="/attachment.cgi?id=519630&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=519630&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519630">Splinter Review</a> </tr> <tr data-attachment-id="519751" class=" attach-obsolete attach-patch " style="display:none"> <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=519751" > Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window </a> </div> <div> <a href="#c14" class="attach-time activity-ref"><span class="rel-time" title="2011-03-16 13:07 PDT" data-time="1300306056">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">12.25 KB, patch </div> </td> <td> <div class="attach-flag"><div class="vcard vcard_12352" ><span class="fn">jst</span> </div>: <a href="#c15" class="flag-name-status rel-time-title activity-ref" title="14 years ago" data-time="1300306056" > review+</a> </div></td> <td class="attach-actions"> <a href="/attachment.cgi?id=519751&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=519751&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519751">Splinter Review</a> </tr> <tr data-attachment-id="523036" class=" attach-obsolete attach-patch " style="display:none"> <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=523036" > Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window </a> </div> <div> <a href="#c19" class="attach-time activity-ref"><span class="rel-time" title="2011-03-30 09:38 PDT" data-time="1301503123">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">12.42 KB, patch </div> </td> <td></td> <td class="attach-actions"> <a href="/attachment.cgi?id=523036&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=523036&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=523036">Splinter Review</a> </tr> <tr data-attachment-id="525537" class=" attach-patch " > <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=525537" > Part 1 - Change nsIDocShellTreeOwner </a> </div> <div> <a href="#c23" class="attach-time activity-ref"><span class="rel-time" title="2011-04-12 16:11 PDT" data-time="1302649870">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">4.78 KB, patch </div> </td> <td> <div class="attach-flag"><div class="vcard vcard_20209" ><span class="fn">bzbarsky</span> </div>: <a href="#c26" class="flag-name-status rel-time-title activity-ref" title="14 years ago" data-time="1302649870" > review+</a> </div></td> <td class="attach-actions"> <a href="/attachment.cgi?id=525537&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=525537&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525537">Splinter Review</a> </tr> <tr data-attachment-id="525540" class=" attach-patch " > <td class="attach-desc-td"> <div class="attach-desc"> <a href="/attachment.cgi?id=525540" > Part 2 - Prevent abusively moving/resizing window </a> </div> <div> <a href="#c24" class="attach-time activity-ref"><span class="rel-time" title="2011-04-12 16:13 PDT" data-time="1302650011">14 years ago</span></a> <span class="attach-author"><div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div></span> </div> <div class="attach-info">14.69 KB, patch </div> </td> <td> <div class="attach-flag"><div class="vcard vcard_20209" ><span class="fn">bzbarsky</span> </div>: <a href="#c27" class="flag-name-status rel-time-title activity-ref" title="14 years ago" data-time="1302650011" > review+</a> </div> <div class="attach-flag"><div class="vcard vcard_11608" ><span class="fn">jruderman</span> </div>: <a href="#c25" class="flag-name-status rel-time-title activity-ref" title="14 years ago" data-time="1302650044" > feedback+</a> </div></td> <td class="attach-actions"> <a href="/attachment.cgi?id=525540&action=edit" data-details="1">Details</a> | <a href="/attachment.cgi?id=525540&action=diff">Diff</a>  | <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525540">Splinter Review</a> </tr> </table> <footer id="attachments-footer"> <div id="attachments-actions"> <button type="button" id="attachments-obsolete-btn" class="secondary">Show Obsolete</button> </div> </footer> </div> </section> <script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9"> init_module_visibility(); </script> <meta name="firefox-versions" content="{"FIREFOX_AURORA":"","FIREFOX_DEVEDITION":"136.0b9","FIREFOX_ESR":"128.7.0esr","FIREFOX_ESR115":"115.20.0esr","FIREFOX_ESR_NEXT":"","FIREFOX_NIGHTLY":"137.0a1","LAST_MERGE_DATE":"2025-02-03","LAST_RELEASE_DATE":"2025-02-04","LAST_SOFTFREEZE_DATE":"2025-01-30","LAST_STRINGFREEZE_DATE":"2025-01-31","LATEST_FIREFOX_DEVEL_VERSION":"136.0b9","LATEST_FIREFOX_OLDER_VERSION":"3.6.28","LATEST_FIREFOX_RELEASED_DEVEL_VERSION":"136.0b9","LATEST_FIREFOX_VERSION":"135.0.1","NEXT_MERGE_DATE":"2025-03-03","NEXT_RELEASE_DATE":"2025-03-04","NEXT_SOFTFREEZE_DATE":"2025-02-27","NEXT_STRINGFREEZE_DATE":"2025-02-28"}"> <div id="comment-actions"> <button type="button" id="bottom-btn" class="secondary" aria-label="Go to Page Bottom">Bottom ↓</button> <div class="dropdown"> <button type="button" id="comment-tags-btn" aria-haspopup="true" aria-label="Tags" aria-expanded="false" aria-controls="comment-tags-menu" class="dropdown-button minor">Tags ▾</button> <ul id="comment-tags-menu" role="menu" tabindex="0" class="dropdown-content left" style="display:none"> <li role="presentation"> <a role="menuitem" tabindex="-1" data-comment-tag="">Reset</a> </li> </ul> </div> <div class="dropdown"> <button type="button" id="view-menu-btn" aria-haspopup="true" aria-label="Timeline" aria-expanded="false" aria-controls="view-menu" class="dropdown-button minor">Timeline ▾</button> <ul id="view-menu" role="menu" tabindex="0" class="dropdown-content left" style="display:none"> <li role="presentation"> <a id="view-reset" role="menuitem" tabindex="-1">Reset</a> </li> <li role="separator"></li> <li role="presentation"> <a id="view-collapse-all" role="menuitem" tabindex="-1">Collapse All</a> </li> <li role="presentation"> <a id="view-expand-all" role="menuitem" tabindex="-1">Expand All</a> </li> <li role="presentation"> <a id="view-comments-only" role="menuitem" tabindex="-1">Comments Only</a> </li> </ul> </div> </div> <div class="change-set" id="c0"><div class="comment" data-id="4691504" data-no="0" data-tags=""> <table class="layout-table change-head reporter" id="ch-0" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_382626" ><img src="https://secure.gravatar.com/avatar/aff8f81f9131e8abb3ef166dfeac3193?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_382626" ><a class="email disabled" href="/user_profile?user_id=382626" > <span class="fna">John Wayne Hill (UX Intern)</span></a> </div> <span class="user-role">Reporter</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-0" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-0" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c0">Description</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-05-12 17:38 PDT" data-time="1273711081">15 years ago</span> </div> </td> </tr> <tr id="ctag-0"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-0" data-comment-id="4691504">(Note: this is filed as part of the “Paper Cut” bugs — we assume that there may be multiple existing bugs on this. Please make them block this bug, and we will de-dupe if they are indeed exactly the same. Thanks!) To reproduce: 1. go to a website that re-sizes the main window 2. be frustrated Recommendation: Change defaults that allow re-sizing of main window to disallow by default. Pop-up windows should be allowed to be re-sized.</div></div><div class="change-set" id="a1546714_103593"><div class="change" id="aa1546714_103593"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_103593" id="a1546714_103593"><img src="https://secure.gravatar.com/avatar/08de945228403cb0598d5906e2407a7d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_103593" id="a1546714_103593"><a class="email " href="/user_profile?user_id=103593" > <span class="fna">:Gavin Sharp [email: gavin@gavinsharp.com]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a1546714_103593" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a1546714_103593"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a1546714_103593">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-05-30 15:16 PDT" data-time="1275257795">15 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Blocks: <a class="bz_bug_link bz_status_NEW" title="NEW - [meta] Paper cuts: Being in Control" href="/show_bug.cgi?id=565512">cuts-control</a></div><div class="change">Depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED WONTFIX - Default dom.disable_window_move_resize to true" href="/show_bug.cgi?id=454779">454779</a>, <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED WONTFIX - Set dom.disable_window_move_resize to true by default" href="/show_bug.cgi?id=328492">328492</a><br>No longer depends on: <a class="bz_bug_link bz_status_NEW" title="NEW - [meta] Paper cuts: Being in Control" href="/show_bug.cgi?id=565512">cuts-control</a></div></div></div><div class="change-set" id="c1"><div class="comment" data-id="4811367" data-no="1" data-tags=""> <table class="layout-table change-head " id="ch-1" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_190375" id="a1546714_103593"><img src="https://secure.gravatar.com/avatar/8f7c9f84be1f678bc5379949d88a62f5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_190375" id="a1546714_103593"><a class="email " href="/user_profile?user_id=190375" > <span class="fna">Michael Monreal [:micmon]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-1" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-1" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c1">Comment 1</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-07-22 04:52 PDT" data-time="1279799553">15 years ago</span> </div> </td> </tr> <tr id="ctag-1"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-1" data-comment-id="4811367">So basicly we need to split "dom.disable_window_move_resize" for main window and popups and set the main window one to false?</div></div><div class="change-set" id="c2"><div class="comment" data-id="4928058" data-no="2" data-tags=""> <table class="layout-table change-head " id="ch-2" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_71622" id="a1546714_103593"><img src="https://secure.gravatar.com/avatar/2ec5e91162b703f03acb1c82503d3779?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_71622" id="a1546714_103593"><a class="email " href="/user_profile?user_id=71622" > <span class="fna">James Darpinian</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-2" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-2" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c2">Comment 2</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-09-09 23:24 PDT" data-time="1284099849">14 years ago</span> </div> </td> </tr> <tr id="ctag-2"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-2" data-comment-id="4928058">This needs the same solution as <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - .blur() results in window being lowered and some other window being raised (regardless of value of dom.disable_window_flip) (popunders are possible)" href="/show_bug.cgi?id=369306">bug 369306</a>: allow window A to move/resize window B only if A created B.</div></div><div class="change-set" id="a20137419_383227"><div class="change" id="aa20137419_383227"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_383227" id="a20137419_383227"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_383227" id="a20137419_383227"><a class="email disabled" href="/user_profile?user_id=383227" > <span class="fna">Frank Yan (:fryn)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a20137419_383227" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a20137419_383227"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a20137419_383227">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-12-31 18:21 PST" data-time="1293848500">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">URL: <a href="javascript:resizeTo(300,300)" target="_blank" rel="noreferrer" class="bug-url" data-safe="0" >javascript:resizeTo(300,300)</a></div><div class="change">Target Milestone: --- → Firefox 4.0b8</div></div></div><div class="change-set" id="c3"><div class="comment" data-id="5168473" data-no="3" data-tags=""> <table class="layout-table change-head " id="ch-3" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_383227" id="a20137419_383227"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_383227" id="a20137419_383227"><a class="email disabled" href="/user_profile?user_id=383227" > <span class="fna">Frank Yan (:fryn)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-3" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-3" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c3">Comment 3</a> </h3> • <div class="change-time"><span class="rel-time" title="2010-12-31 18:23 PST" data-time="1293848607">14 years ago</span> </div> </td> </tr> <tr id="ctag-3"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-3" data-comment-id="5168473">Added simple testcase as URL above.</div></div><div class="change-set" id="c4"><div class="comment" data-id="5175043" data-no="4" data-tags=""> <table class="layout-table change-head " id="ch-4" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a20137419_383227"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a20137419_383227"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-4" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-4" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c4">Comment 4</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-01-04 14:24 PST" data-time="1294179840">14 years ago</span> </div> </td> </tr> <tr id="ctag-4"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-4" data-comment-id="5175043">Solutions have been proposed in <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - don't allow web sites to resize windows with toolbars (by default)" href="/show_bug.cgi?id=186708">bug 186708</a> and <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">bug 502561</a>. But James might be right, again :)</div></div><div class="change-set" id="a23563969_383227"><div class="change" id="aa23563969_383227"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_383227" id="a23563969_383227"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_383227" id="a23563969_383227"><a class="email disabled" href="/user_profile?user_id=383227" > <span class="fna">Frank Yan (:fryn)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a23563969_383227" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a23563969_383227"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a23563969_383227">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-02-09 10:10 PST" data-time="1297275050">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Target Milestone: Firefox 4.0b8 → ---</div></div></div><div class="change-set" id="c5"><div class="comment" data-id="5346735" data-no="5" data-tags=""> <table class="layout-table change-head assignee" id="ch-5" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a23563969_383227"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a23563969_383227"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-5" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-5" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c5">Comment 5</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 14:13 PDT" data-time="1300223613">14 years ago</span> </div> </td> </tr> <tr id="ctag-5"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-519509" class="attachment patch obsolete" data-id="519509" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="window-resize.patch"> <meta itemprop="contentSize" content="2103"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=519509"> <a class="link" href="attachment.cgi?id=519509&action=diff"> <span id="att-519509-description" itemprop="description">Simply check that the caller is the opener</span></a> (obsolete) — <a href="attachment.cgi?id=519509&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519509">Splinter Review</a> </div> </div> <div class="comment-text " id="ct-5" data-comment-id="5346735"><a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c2">Comment 2</a> seems to make a lot of sense. I've implemented that and it seems to fit Jesse's proposal in <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">bug 502561</a>.</div><div class="activity"><div class="change">Assignee: nobody → mounir.lamouri</div><div class="change">Status: NEW → ASSIGNED</div><div class="change"> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener" class="" >Attachment #519509</a> - Flags: feedback?(jruderman)</div></div></div><div class="change-set" id="a26512548_342786"><div class="change" id="aa26512548_342786"> <table class="layout-table change-head assignee" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a26512548_342786" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a26512548_342786"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a26512548_342786">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 14:13 PDT" data-time="1300223629">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Whiteboard: [needs feedback]</div></div></div><div class="change-set" id="c6"><div class="comment" data-id="5346756" data-no="6" data-tags=""> <table class="layout-table change-head assignee" id="ch-6" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-6" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-6" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c6">Comment 6</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 14:17 PDT" data-time="1300223833">14 years ago</span> </div> </td> </tr> <tr id="ctag-6"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-519510" class="attachment" data-id="519510" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="resize.html"> <meta itemprop="contentSize" content="644"> <meta itemprop="encodingFormat" content="text/html"> <div class="label"> Attached file <a class="link" href="attachment.cgi?id=519510" itemprop="contentUrl" > <span id="att-519510-description" itemprop="description">testcase</span></a> — <a href="attachment.cgi?id=519510&action=edit" itemprop="url" data-details="1">Details</a> </div> </div> <div class="comment-text empty" id="ct-6" data-comment-id="5346756"></div></div><div class="change-set" id="c7"><div class="comment" data-id="5346762" data-no="7" data-tags=""> <table class="layout-table change-head assignee" id="ch-7" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-7" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-7" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c7">Comment 7</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 14:20 PDT" data-time="1300224028">14 years ago</span> </div> </td> </tr> <tr id="ctag-7"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-7" data-comment-id="5346762">Basically, the patch makes impossible to resize a window if the caller didn't create it. I would say that most situations where you want to resize a window you didn't create is malicious. Only one seem valid, like Jesse said in <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">bug 502561</a>: when a popup tries to resize itself. Though, users are now able to resize the popups themself and the popup can always be resized by the main window so I would say it worths this small issue.</div><div class="activity"><div class="change">Component: General → DOM</div><div class="change">Keywords: <a href="/buglist.cgi?keywords=testcase&resolution=---">testcase</a></div><div class="change">Product: Firefox → Core</div><div class="change">QA Contact: general → general</div></div></div><div class="change-set" id="c8"><div class="comment" data-id="5346778" data-no="8" data-tags=""> <table class="layout-table change-head assignee" id="ch-8" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-8" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-8" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c8">Comment 8</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 14:24 PDT" data-time="1300224278">14 years ago</span> </div> </td> </tr> <tr id="ctag-8"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-8" data-comment-id="5346778">For those interested, you might find builds here (I just sent the patch to the try server so it might take some time): <a rel="nofollow" href="https://ftp.mozilla.org/pub/mozilla.org/firefox/tryserver-builds/mlamouri@mozilla.com-6a2bd5a96f2d/">https://ftp.mozilla.org/pub/mozilla.org/firefox/tryserver-builds/mlamouri@mozilla.com-6a2bd5a96f2d/</a></div></div><div class="change-set" id="c9"><div class="comment" data-id="5346897" data-no="9" data-tags=""> <table class="layout-table change-head " id="ch-9" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_383227" id="a26512548_342786"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_383227" id="a26512548_342786"><a class="email disabled" href="/user_profile?user_id=383227" > <span class="fna">Frank Yan (:fryn)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-9" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-9" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c9">Comment 9</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-15 15:03 PDT" data-time="1300226582">14 years ago</span> </div> </td> </tr> <tr id="ctag-9"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-9" data-comment-id="5346897">(In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c5">comment #5</a>) <span class="quote">> Created <span class="bz_obsolete"><a href="/attachment.cgi?id=519509" name="attach_519509" title="Simply check that the caller is the opener">attachment 519509</a> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener">[details]</a> <a href="/attachment.cgi?id=519509&action=diff" title="Simply check that the caller is the opener">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519509'>[review]</a> > Simply check that the caller is the opener</span > If a popup gets redirected to a new tab instead of a new window, does this still prevent the resize call from the opener? (It should, because the opener and openee are both in the same "main" window.)</div></div><div class="change-set" id="c10"><div class="comment" data-id="5347776" data-no="10" data-tags=""> <table class="layout-table change-head assignee" id="ch-10" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-10" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-10" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c10">Comment 10</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 02:14 PDT" data-time="1300266841">14 years ago</span> </div> </td> </tr> <tr id="ctag-10"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-10" data-comment-id="5347776">(In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c9">comment #9</a>) <span class="quote">> (In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c5">comment #5</a>) > > Created <span class="bz_obsolete"><a href="/attachment.cgi?id=519509" name="attach_519509" title="Simply check that the caller is the opener">attachment 519509</a> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener">[details]</a> <a href="/attachment.cgi?id=519509&action=diff" title="Simply check that the caller is the opener">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519509'>[review]</a> > > Simply check that the caller is the opener > > If a popup gets redirected to a new tab instead of a new window, does this > still prevent the resize call from the opener? (It should, because the opener > and openee are both in the same "main" window.)</span > No, here the term "window" isn't equivalent to the one used by your window manager. Each tab has a different window so if you open a popup in another tab instead of another window, the caller and the opener wouldn't be the same.</div></div><div class="change-set" id="c11"><div class="comment" data-id="5348008" data-no="11" data-tags=""> <table class="layout-table change-head assignee" id="ch-11" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26512548_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26512548_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-11" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-11" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c11">Comment 11</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 06:25 PDT" data-time="1300281927">14 years ago</span> </div> </td> </tr> <tr id="ctag-11"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-519630" class="attachment patch obsolete" data-id="519630" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="window-resize.patch"> <meta itemprop="contentSize" content="14026"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=519630"> <a class="link" href="attachment.cgi?id=519630&action=diff"> <span id="att-519630-description" itemprop="description">Part 1 - Limit move/resize actions to the opener of the window.</span></a> (obsolete) — <a href="attachment.cgi?id=519630&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519630">Splinter Review</a> </div> </div> <div class="comment-text " id="ct-11" data-comment-id="5348008">This patch is adding a check to be sure that chrome context can still do whatever it wants. In addition. I've added some tests for chrome and non-chrome.</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener" class="" >Attachment #519509</a> - Attachment is obsolete: true</div><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Flags: review?(jst)</div><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Flags: feedback?(jruderman)</div><div class="change"> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener" class="" >Attachment #519509</a> - Flags: <span class="activity-deleted">feedback?(jruderman)</span></div></div></div><div class="change-set" id="a26570860_342786"><div class="change" id="aa26570860_342786"> <table class="layout-table change-head assignee" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26570860_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26570860_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a26570860_342786" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a26570860_342786"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a26570860_342786">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 06:25 PDT" data-time="1300281941">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Whiteboard: [needs feedback] → [needs review][needs feedback]</div></div></div><div class="change-set" id="c12"><div class="comment" data-id="5348327" data-no="12" data-tags=""> <table class="layout-table change-head assignee" id="ch-12" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26570860_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26570860_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-12" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-12" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c12">Comment 12</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 08:32 PDT" data-time="1300289543">14 years ago</span> </div> </td> </tr> <tr id="ctag-12"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-12" data-comment-id="5348327">(In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c9">comment #9</a>) <span class="quote">> (In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c5">comment #5</a>) > > Created <span class="bz_obsolete"><a href="/attachment.cgi?id=519509" name="attach_519509" title="Simply check that the caller is the opener">attachment 519509</a> <a href="/attachment.cgi?id=519509&action=edit" title="Simply check that the caller is the opener">[details]</a> <a href="/attachment.cgi?id=519509&action=diff" title="Simply check that the caller is the opener">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519509'>[review]</a> > > Simply check that the caller is the opener > > If a popup gets redirected to a new tab instead of a new window, does this > still prevent the resize call from the opener? (It should, because the opener > and openee are both in the same "main" window.)</span > Hmm, my previous comment (<a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c10">comment 10</a>) is partially true: the caller isn't the opener because there are both on the same window but it's wrong because the caller and the opener can be the same tab. I wasn't very awake I guess... AFAIK, this is only possible when the user sets this preference to 0: browser.link.open_newwindow.restriction If that's really the case, I don't think we should care about that now. Though, I think we should always disable moving and resizing windows if browser.link.open_newwindow.restriction is set to 0 because all windows will be user created ones. I wonder what does this preference when set to 1...</div></div><div class="change-set" id="c13"><div class="comment" data-id="5348446" data-no="13" data-tags=""> <table class="layout-table change-head assignee" id="ch-13" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26570860_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26570860_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-13" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-13" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c13">Comment 13</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 09:12 PDT" data-time="1300291964">14 years ago</span> </div> </td> </tr> <tr id="ctag-13"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-13" data-comment-id="5348446">Doc about browser.link.open_newwindow.restriction: <a rel="nofollow" href="http://kb.mozillazine.org/Browser.link.open_newwindow.restriction">http://kb.mozillazine.org/Browser.link.open_newwindow.restriction</a> I assume we can't have access to a tab created with a link (and target=_blank), so with the default behavior, we can only resize the main window with window.open('about:blank', '', ''); and manipulating the created window... I think this can be fixed easily. I'm going to update the patch.</div></div><div class="change-set" id="a26594920_342786"><div class="change" id="aa26594920_342786"> <table class="layout-table change-head assignee" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26594920_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26594920_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a26594920_342786" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a26594920_342786"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a26594920_342786">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 13:06 PDT" data-time="1300306001">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Attachment description: Patch v1 → Part 1 - Limit move/resize actions to the opener of the window.</div></div></div><div class="change-set" id="c14"><div class="comment" data-id="5349243" data-no="14" data-tags=""> <table class="layout-table change-head assignee" id="ch-14" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26594920_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26594920_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-14" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-14" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c14">Comment 14</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 13:07 PDT" data-time="1300306056">14 years ago</span> </div> </td> </tr> <tr id="ctag-14"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-519751" class="attachment patch obsolete" data-id="519751" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="windows-resize-tabs.patch"> <meta itemprop="contentSize" content="12543"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=519751"> <a class="link" href="attachment.cgi?id=519751&action=diff"> <span id="att-519751-description" itemprop="description">Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window</span></a> (obsolete) — <a href="attachment.cgi?id=519751&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519751">Splinter Review</a> </div> </div> <div class="comment-text " id="ct-14" data-comment-id="5349243">Harder than I thought but it's finally done :)</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Flags: review?(jst)</div></div></div><div class="change-set" id="a26601408_12352"><div class="change" id="aa26601408_12352"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_12352" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/1e8a6f9ec1e854e31b94b2edc0c56b81?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_12352" id="a26601408_12352"><a class="email " href="/user_profile?user_id=12352" > <span class="fna">Johnny Stenback (:jst)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a26601408_12352" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a26601408_12352"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a26601408_12352">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 14:54 PDT" data-time="1300312489">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Flags: review?(jst) → review+</div></div></div><div class="change-set" id="c15"><div class="comment" data-id="5349855" data-no="15" data-tags=""> <table class="layout-table change-head " id="ch-15" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_12352" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/1e8a6f9ec1e854e31b94b2edc0c56b81?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_12352" id="a26601408_12352"><a class="email " href="/user_profile?user_id=12352" > <span class="fna">Johnny Stenback (:jst)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-15" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-15" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c15">Comment 15</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-16 16:46 PDT" data-time="1300319165">14 years ago</span> </div> </td> </tr> <tr id="ctag-15"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-15" data-comment-id="5349855">Comment on <span class="bz_obsolete"><a href="/attachment.cgi?id=519751" name="attach_519751" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window">attachment 519751</a> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window">[details]</a> <a href="/attachment.cgi?id=519751&action=diff" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=519751'>[review]</a> Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window - In docshell/base/nsIDocShellTreeItem.idl: /* Returns the root DocShellTreeItem of the same type. This is a convience equivalent to getting the parent of the same type and its parent until there isn't a parent. */ readonly attribute nsIDocShellTreeItem sameTypeRootTreeItem; + /* + Returns the parent if there is one and has the given type. + Returns null otherwise. Make the indentation line up here, you'll need to use tabs, yuck! - In nsGlobalWindow::CanMoveResizeWindows(): + /** + * In some cases, the popup can be created as a new tab. In that case, we + * have to make sure that both windows aren't in the some chrome window. + * If they are, we do not fulfil the request. + */ + nsCOMPtr<nsIDocShellTreeItem> treeItem = do_QueryInterface(mDocShell); + treeItem->GetRootTreeItemWithType(nsIDocShellTreeItem::typeChrome, + getter_AddRefs(treeItem)); I don't see any guarantees that mDocShell is non-null here, you should null check treeItem here before dereferencing. + nsCOMPtr<nsIDocShellTreeItem> callerTreeItem = + do_QueryInterface(caller->GetDocShell()); + callerTreeItem->GetRootTreeItemWithType(nsIDocShellTreeItem::typeChrome, + getter_AddRefs(callerTreeItem)); Same here, I think the opener could be a closed window here, which means it has no docshell. Null check callerTreeItem. - In embedding/browser/webBrowser/nsWebBrowser.cpp: NS_IMETHODIMP nsWebBrowser::GetParent(nsIDocShellTreeItem** aParent) { *aParent = nsnull; return NS_OK; } +NS_IMETHODIMP nsWebBrowser::GetParentWithType(PRInt32 aType, nsIDocShellTreeItem** aParent) +{ + nsresult rv; This violates the use-the-indentation-style-of-the-surrounding-code rule, which would mean 3 space indentation. Geez, I'm tempted to say feel free to violate that here :) r=jst with that. But I think bz should look over the docshell API change (addition) here as well.</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Flags: <span class="activity-deleted">review?(jst)</span></div><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Flags: review?(bzbarsky)</div><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Flags: review+</div></div></div><div class="change-set" id="c16"><div class="comment" data-id="5350571" data-no="16" data-tags=""> <table class="layout-table change-head " id="ch-16" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a26601408_12352"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a26601408_12352"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-16" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-16" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c16">Comment 16</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-17 06:41 PDT" data-time="1300369312">14 years ago</span> </div> </td> </tr> <tr id="ctag-16"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-16" data-comment-id="5350571">So for part 1, should we consider checking that opener and caller are same-origin instead of identical? Otherwise in a multi-frame page opening a window from one frame and resizing it from another frame would not work...</div></div><div class="change-set" id="c17"><div class="comment" data-id="5350581" data-no="17" data-tags=""> <table class="layout-table change-head " id="ch-17" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a26601408_12352"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a26601408_12352"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-17" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-17" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c17">Comment 17</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-17 06:47 PDT" data-time="1300369643">14 years ago</span> </div> </td> </tr> <tr id="ctag-17"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-17" data-comment-id="5350581">For part 2, fix "chcheck" in the comments? The new code will totally fail under e10s, completely and utterly (because there is no type=chrome parent there). From an API point of view, I think it would make more sense to get the docshell's treeowner and add a new API on nsIDocShellTreeOwner to ask it whether it's in the same window as another tree owner. But on a deeper level, this seems like the wrong place to solve the problem. Why is "check whether we're in the same chrome window" the right thing to check? It seems like the _really_ right thing to check is whether a window is resizable. That should be up to the embedding app to flag. That way if I drag one of the tabs involved to another window, things don't suddenly become resizable... I'd be happy to talk about a decent API for implementing embedder control over this stuff if you want.</div></div><div class="change-set" id="c18"><div class="comment" data-id="5380517" data-no="18" data-tags=""> <table class="layout-table change-head assignee" id="ch-18" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26601408_12352"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-18" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-18" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c18">Comment 18</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-30 09:17 PDT" data-time="1301501865">14 years ago</span> </div> </td> </tr> <tr id="ctag-18"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-18" data-comment-id="5380517">Boris, would you be fine with comments 16 and 17 resolved in follow-ups?</div></div><div class="change-set" id="c19"><div class="comment" data-id="5380577" data-no="19" data-tags=""> <table class="layout-table change-head assignee" id="ch-19" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26601408_12352"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-19" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-19" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c19">Comment 19</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-30 09:38 PDT" data-time="1301503123">14 years ago</span> </div> </td> </tr> <tr id="ctag-19"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-523036" class="attachment patch obsolete" data-id="523036" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="windows-resize-tabs.patch"> <meta itemprop="contentSize" content="12723"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=523036"> <a class="link" href="attachment.cgi?id=523036&action=diff"> <span id="att-523036-description" itemprop="description">Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window</span></a> (obsolete) — <a href="attachment.cgi?id=523036&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=523036">Splinter Review</a> </div> </div> <div class="comment-text " id="ct-19" data-comment-id="5380577">Updated with jst's comments.</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Attachment is obsolete: true</div><div class="change"> <a href="/attachment.cgi?id=523036&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #523036</a> - Flags: review?(bzbarsky)</div><div class="change"> <a href="/attachment.cgi?id=519751&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #519751</a> - Flags: <span class="activity-deleted">review?(bzbarsky)</span></div></div></div><div class="change-set" id="c20"><div class="comment" data-id="5380611" data-no="20" data-tags=""> <table class="layout-table change-head " id="ch-20" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a26601408_12352"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a26601408_12352"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-20" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-20" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c20">Comment 20</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-30 09:48 PDT" data-time="1301503734">14 years ago</span> </div> </td> </tr> <tr id="ctag-20"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-20" data-comment-id="5380611">I'm not ok with <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c16">comment 16</a> being a followup, due to the website breakage potential. For <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c17">comment 17</a>, I'm ok with a better API being a followup. For the e10s bit, we need to check with the fennec folks. Do they even allow resizing at all? If not, then for now it's probably ok to fix the e10s issues as a followup.</div></div><div class="change-set" id="c21"><div class="comment" data-id="5380630" data-no="21" data-tags=""> <table class="layout-table change-head assignee" id="ch-21" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26601408_12352"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-21" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-21" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c21">Comment 21</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-30 09:53 PDT" data-time="1301503984">14 years ago</span> </div> </td> </tr> <tr id="ctag-21"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-21" data-comment-id="5380630">(In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c20">comment #20</a>) <span class="quote">> For <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c17">comment 17</a>, I'm ok with a better API being a followup. For the e10s bit, > we need to check with the fennec folks. Do they even allow resizing at all? > If not, then for now it's probably ok to fix the e10s issues as a followup.</span > They do not allow resizing and moving windows.</div></div><div class="change-set" id="c22"><div class="comment" data-id="5380891" data-no="22" data-tags=""> <table class="layout-table change-head " id="ch-22" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a26601408_12352"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-22" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-22" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c22">Comment 22</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-03-30 11:07 PDT" data-time="1301508471">14 years ago</span> </div> </td> </tr> <tr id="ctag-22"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-22" data-comment-id="5380891">I'd prefer to use the heuristic in <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">bug 502561</a>. It's a combination of existing heuristics, so we don't have to worry about getting it wrong. And it avoids blocking resizes that the web page (or popup) can effectively do anyway by closing the old popup and opening a new one. In particular, I think the "allow if same-origin with opener" approach in this bug would disallow popups from resizing themselves in response to clicks.</div></div><div class="change-set" id="c23"><div class="comment" data-id="5405140" data-no="23" data-tags=""> <table class="layout-table change-head assignee" id="ch-23" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26601408_12352"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-23" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-23" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c23">Comment 23</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-12 16:11 PDT" data-time="1302649870">14 years ago</span> </div> </td> </tr> <tr id="ctag-23"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-525537" class="attachment patch" data-id="525537" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="add-numbertarge-docshelltreeowner.patch"> <meta itemprop="contentSize" content="4894"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=525537"> <a class="link" href="attachment.cgi?id=525537&action=diff"> <span id="att-525537-description" itemprop="description">Part 1 - Change nsIDocShellTreeOwner</span></a> — <a href="attachment.cgi?id=525537&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525537">Splinter Review</a> </div> </div> <div class="comment-text empty" id="ct-23" data-comment-id="5405140"></div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Attachment is obsolete: true</div><div class="change"> <a href="/attachment.cgi?id=523036&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #523036</a> - Attachment is obsolete: true</div><div class="change"> <a href="/attachment.cgi?id=525537&action=edit" title="Part 1 - Change nsIDocShellTreeOwner" class="" >Attachment #525537</a> - Flags: review?(bzbarsky)</div><div class="change"> <a href="/attachment.cgi?id=519630&action=edit" title="Part 1 - Limit move/resize actions to the opener of the window." class="" >Attachment #519630</a> - Flags: <span class="activity-deleted">feedback?(jruderman)</span></div><div class="change"> <a href="/attachment.cgi?id=523036&action=edit" title="Part 2 - Do not allow move/resize action if the window and the caller are in the same chrome window" class="" >Attachment #523036</a> - Flags: <span class="activity-deleted">review?(bzbarsky)</span></div></div></div><div class="change-set" id="c24"><div class="comment" data-id="5405147" data-no="24" data-tags=""> <table class="layout-table change-head assignee" id="ch-24" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a26601408_12352"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a26601408_12352"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-24" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-24" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c24">Comment 24</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-12 16:13 PDT" data-time="1302650011">14 years ago</span> </div> </td> </tr> <tr id="ctag-24"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div id="att-525540" class="attachment patch" data-id="525540" itemscope itemtype="http://schema.org/MediaObject"> <meta itemprop="name" content="move-resize-protection.patch"> <meta itemprop="contentSize" content="15043"> <meta itemprop="encodingFormat" content="text/plain"> <div class="label"> Attached patch <meta itemprop="contentUrl" content="attachment.cgi?id=525540"> <a class="link" href="attachment.cgi?id=525540&action=diff"> <span id="att-525540-description" itemprop="description">Part 2 - Prevent abusively moving/resizing window</span></a> — <a href="attachment.cgi?id=525540&action=edit" itemprop="url" data-details="1">Details</a> — <a href="/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525540">Splinter Review</a> </div> </div> <div class="comment-text " id="ct-24" data-comment-id="5405147">Two rules: 1. Can't resize a window/tab that hasn't been created by window.open. 2. Can't resize a tab if the tab is in a window with more than one tab. This is fixing the issue Jesse mentioned (popup can now resize themselves).</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window" class="" >Attachment #525540</a> - Flags: review?(bzbarsky)</div></div></div><div class="change-set" id="a28938963_342786"><div class="change" id="aa28938963_342786"> <table class="layout-table change-head assignee" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a28938963_342786"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a28938963_342786"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a28938963_342786" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a28938963_342786"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a28938963_342786">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-12 16:14 PDT" data-time="1302650044">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window" class="" >Attachment #525540</a> - Flags: feedback?(jruderman)</div></div></div><div class="change-set" id="c25"><div class="comment" data-id="5406280" data-no="25" data-tags=""> <table class="layout-table change-head " id="ch-25" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a28938963_342786"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a28938963_342786"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-25" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-25" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c25">Comment 25</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-13 06:25 PDT" data-time="1302701101">14 years ago</span> </div> </td> </tr> <tr id="ctag-25"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-25" data-comment-id="5406280">Comment on <span class=""><a href="/attachment.cgi?id=525540" name="attach_525540" title="Part 2 - Prevent abusively moving/resizing window">attachment 525540</a> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window">[details]</a> <a href="/attachment.cgi?id=525540&action=diff" title="Part 2 - Prevent abusively moving/resizing window">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525540'>[review]</a> Part 2 - Prevent abusively moving/resizing window Sounds good. We can do the more restrictive stuff later in <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">bug 502561</a>.</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window" class="" >Attachment #525540</a> - Flags: feedback?(jruderman) → feedback+</div></div></div><div class="change-set" id="a28990040_11608"><div class="change" id="aa28990040_11608"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a28990040_11608"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a28990040_11608" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a28990040_11608"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a28990040_11608">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-13 06:25 PDT" data-time="1302701121">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Blocks: <a class="bz_bug_link bz_status_NEW" title="NEW - [meta] Protect users from websites that trap them or destroy their experience" href="/show_bug.cgi?id=432687">eviltraps</a></div></div></div><div class="change-set" id="c26"><div class="comment" data-id="5410145" data-no="26" data-tags=""> <table class="layout-table change-head " id="ch-26" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a28990040_11608"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a28990040_11608"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-26" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-26" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c26">Comment 26</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-14 12:09 PDT" data-time="1302808144">14 years ago</span> </div> </td> </tr> <tr id="ctag-26"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-26" data-comment-id="5410145">Comment on <span class=""><a href="/attachment.cgi?id=525537" name="attach_525537" title="Part 1 - Change nsIDocShellTreeOwner">attachment 525537</a> <a href="/attachment.cgi?id=525537&action=edit" title="Part 1 - Change nsIDocShellTreeOwner">[details]</a> <a href="/attachment.cgi?id=525537&action=diff" title="Part 1 - Change nsIDocShellTreeOwner">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525537'>[review]</a> Part 1 - Change nsIDocShellTreeOwner <span class="quote">> + unsigned long getTargetableShellsCount();</span > readonly attribute unsigned long targetableShellCount; (note "shell" vs "shells"). r=me with that changed and a followup bug filed about adding e10s plumbing for this.</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=525537&action=edit" title="Part 1 - Change nsIDocShellTreeOwner" class="" >Attachment #525537</a> - Flags: review?(bzbarsky) → review+</div></div></div><div class="change-set" id="c27"><div class="comment" data-id="5410149" data-no="27" data-tags=""> <table class="layout-table change-head " id="ch-27" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a28990040_11608"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a28990040_11608"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-27" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-27" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c27">Comment 27</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-14 12:11 PDT" data-time="1302808263">14 years ago</span> </div> </td> </tr> <tr id="ctag-27"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-27" data-comment-id="5410149">Comment on <span class=""><a href="/attachment.cgi?id=525540" name="attach_525540" title="Part 2 - Prevent abusively moving/resizing window">attachment 525540</a> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window">[details]</a> <a href="/attachment.cgi?id=525540&action=diff" title="Part 2 - Prevent abusively moving/resizing window">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525540'>[review]</a> Part 2 - Prevent abusively moving/resizing window <span class="quote">> + // Don't allow scripts to move or resize windows that were not open by a</span > s/open/opened/ r=me</div><div class="activity"><div class="change"> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window" class="" >Attachment #525540</a> - Flags: review?(bzbarsky) → review+</div></div></div><div class="change-set" id="c28"><div class="comment" data-id="5418325" data-no="28" data-tags=""> <table class="layout-table change-head assignee" id="ch-28" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a28990040_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-28" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-28" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c28">Comment 28</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-04-19 05:58 PDT" data-time="1303217927">14 years ago</span> </div> </td> </tr> <tr id="ctag-28"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-28" data-comment-id="5418325">Unfortunately, I can't push these patches yet because the tests seem to be random on the try server. I'm still investigating why.</div><div class="activity"><div class="change">Whiteboard: [needs review][needs feedback] → [needs tests fixes]</div></div></div><div class="change-set" id="c29"><div class="comment" data-id="5504529" data-no="29" data-tags=""> <table class="layout-table change-head assignee" id="ch-29" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a28990040_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-29" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-29" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c29">Comment 29</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-05-31 14:53 PDT" data-time="1306878808">14 years ago</span> </div> </td> </tr> <tr id="ctag-29"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-29" data-comment-id="5504529">I've finally fixed the tests... That was hard :)</div><div class="activity"><div class="change">Flags: in-testsuite+</div><div class="change">Whiteboard: [needs tests fixes] → [fixed in cedar]</div></div></div><div class="change-set" id="c30"><div class="comment" data-id="5505472" data-no="30" data-tags=""> <table class="layout-table change-head assignee" id="ch-30" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a28990040_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-30" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-30" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c30">Comment 30</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-06-01 01:31 PDT" data-time="1306917117">14 years ago</span> </div> </td> </tr> <tr id="ctag-30"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-30" data-comment-id="5505472">Pushed: <a rel="nofollow" href="http://hg.mozilla.org/mozilla-central/rev/1c52f2d68d39">http://hg.mozilla.org/mozilla-central/rev/1c52f2d68d39</a> <a rel="nofollow" href="http://hg.mozilla.org/mozilla-central/rev/3c723f2fe07c">http://hg.mozilla.org/mozilla-central/rev/3c723f2fe07c</a></div><div class="activity"><div class="change">Status: ASSIGNED → RESOLVED</div><div class="change">Closed: <span class="rel-time" title="2011-06-01 01:31 PDT" data-time="1306917117">14 years ago</span></div><div class="change">Resolution: --- → FIXED</div><div class="change">Whiteboard: <span class="activity-deleted">[fixed in cedar]</span></div><div class="change">Target Milestone: --- → mozilla7</div></div></div><div class="change-set" id="c31"><div class="comment" data-id="5505473" data-no="31" data-tags=""> <table class="layout-table change-head assignee" id="ch-31" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a28990040_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-31" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-31" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c31">Comment 31</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-06-01 01:33 PDT" data-time="1306917195">14 years ago</span> </div> </td> </tr> <tr id="ctag-31"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-31" data-comment-id="5505473">tracking-firefox-7 given that this is a new feature and might break some websites.</div><div class="activity"><div class="change"> <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=isnotempty">tracking-firefox7</a>: --- → <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=equals&v1=%3F">?</a></div></div></div><div class="change-set" id="c33"><div class="comment" data-id="5514399" data-no="33" data-tags=""> <table class="layout-table change-head " id="ch-33" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_388139" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/94a86fde75e0b0f36acd735214f579f5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_388139" id="a28990040_11608"><a class="email " href="/user_profile?user_id=388139" > <span class="fna">matthias koplenig [:metasieben]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-33" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-33" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c33">Comment 33</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-06-05 16:47 PDT" data-time="1307317622">14 years ago</span> </div> </td> </tr> <tr id="ctag-33"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-33" data-comment-id="5514399">sorry for the bug-spam. i used to use a bookmarklet to resize and center the window for (emulating/)testing different window-sizes (mobile/media-queries). is there any way to replicate the old behaviour, without writing a (xul) addon? looks like the addon-sdk has some limitations there, as well.</div></div><div class="change-set" id="c34"><div class="comment" data-id="5514408" data-no="34" data-tags=""> <table class="layout-table change-head " id="ch-34" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a28990040_11608"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-34" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-34" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c34">Comment 34</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-06-05 17:08 PDT" data-time="1307318927">14 years ago</span> </div> </td> </tr> <tr id="ctag-34"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-34" data-comment-id="5514408">You could use an existing addon such as <a rel="nofollow" href="https://addons.mozilla.org/en-US/firefox/addon/firesizer/">https://addons.mozilla.org/en-US/firefox/addon/firesizer/</a>.</div></div><div class="change-set" id="c35"><div class="comment" data-id="5514447" data-no="35" data-tags=""> <table class="layout-table change-head " id="ch-35" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_388139" id="a28990040_11608"><img src="https://secure.gravatar.com/avatar/94a86fde75e0b0f36acd735214f579f5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_388139" id="a28990040_11608"><a class="email " href="/user_profile?user_id=388139" > <span class="fna">matthias koplenig [:metasieben]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-35" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-35" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c35">Comment 35</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-06-05 18:17 PDT" data-time="1307323075">14 years ago</span> </div> </td> </tr> <tr id="ctag-35"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-35" data-comment-id="5514447">(In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c34">comment #34</a>) <span class="quote">> You could use an existing addon such as > <a rel="nofollow" href="https://addons.mozilla.org/en-US/firefox/addon/firesizer/">https://addons.mozilla.org/en-US/firefox/addon/firesizer/</a>.</span > true. while this is a possiblity, the old way of having a bookmarklet to change the size of the window was far more convenient (and one addon less to worry about). *sad to see it go*</div></div><div class="change-set" id="a36206901_5003"><div class="change" id="aa36206901_5003"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_5003" id="a36206901_5003"><img src="https://secure.gravatar.com/avatar/4c29696cb5fe35b184e1221706f87874?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_5003" id="a36206901_5003"><a class="email " href="/user_profile?user_id=5003" > <span class="fna">Asa Dotzler [:asa]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a36206901_5003" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a36206901_5003"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a36206901_5003">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-07-05 19:06 PDT" data-time="1309917982">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Whiteboard: potential website fallout from new feature</div></div></div><div class="change-set" id="a36267382_5003"><div class="change" id="aa36267382_5003"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_5003" id="a36267382_5003"><img src="https://secure.gravatar.com/avatar/4c29696cb5fe35b184e1221706f87874?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_5003" id="a36267382_5003"><a class="email " href="/user_profile?user_id=5003" > <span class="fna">Asa Dotzler [:asa]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a36267382_5003" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a36267382_5003"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a36267382_5003">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-07-06 11:54 PDT" data-time="1309978463">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change"> <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=isnotempty">tracking-firefox7</a>: <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=equals&v1=%3F">?</a> → <a href="/buglist.cgi?f1=cf_tracking_firefox7&o1=equals&v1=%2B">+</a></div></div></div><div class="change-set" id="a36267405_482154"><div class="change" id="aa36267405_482154"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_482154" id="a36267405_482154"><img src="https://secure.gravatar.com/avatar/83c37abc1a043dd6cf00660334870340?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_482154" id="a36267405_482154"><a class="email " href="/user_profile?user_id=482154" > <span class="fna">LegNeato</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a36267405_482154" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a36267405_482154"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a36267405_482154">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-07-06 11:54 PDT" data-time="1309978486">14 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Keywords: <a href="/buglist.cgi?keywords=relnote&resolution=---">relnote</a></div></div></div><div class="change-set" id="c36"><div class="comment" data-id="5624097" data-no="36" data-tags=""> <table class="layout-table change-head " id="ch-36" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_334924" id="a36267405_482154"><img src="https://secure.gravatar.com/avatar/080574d0fd1ab056ff3c093eeee2f33a?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_334924" id="a36267405_482154"><a class="email " href="/user_profile?user_id=334924" > <span class="fna">Martin Stružský</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-36" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-36" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c36">Comment 36</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-07-30 23:57 PDT" data-time="1312095455">14 years ago</span> </div> </td> </tr> <tr id="ctag-36"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-36" data-comment-id="5624097">I definitely agree with matthias koplenig, there should be a possibility in about:config to restore the old behavior. Please don't cut off us who love bookmarklets and do not force us to use addons for such tasks that used to be simple. :-( There's no easier way how to quickly set window size to precise width and height, or height that fits the screen's available height, or height that emulates the available height on for example 1024x768 screen… Please, add an about:config option. O:-)</div></div><div class="change-set" id="c37"><div class="comment" data-id="5665155" data-no="37" data-tags=""> <table class="layout-table change-head " id="ch-37" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_421361" id="a36267405_482154"><img src="https://secure.gravatar.com/avatar/8fd72361ddf401e0ed1b976dd22ac39d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_421361" id="a36267405_482154"><a class="email " href="/user_profile?user_id=421361" > <span class="fna">Trif Andrei-Alin[:AlinT]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-37" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-37" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c37">Comment 37</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-08-19 05:13 PDT" data-time="1313755984">14 years ago</span> </div> </td> </tr> <tr id="ctag-37"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-37" data-comment-id="5665155">Mozilla/5.0 (Windows NT 6.1; rv:7.0) Gecko/20100101 Firefox/7.0 Mozilla/5.0 (Windows NT 6.1; rv:9.0a1) Gecko/20110818 Firefox/9.0a1 Setting resolution to VERIFIED FIXED. Thanks.</div><div class="activity"><div class="change">Status: RESOLVED → VERIFIED</div></div></div><div class="change-set" id="c38"><div class="comment" data-id="5665167" data-no="38" data-tags=""> <table class="layout-table change-head " id="ch-38" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_334924" id="a36267405_482154"><img src="https://secure.gravatar.com/avatar/080574d0fd1ab056ff3c093eeee2f33a?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_334924" id="a36267405_482154"><a class="email " href="/user_profile?user_id=334924" > <span class="fna">Martin Stružský</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-38" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-38" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c38">Comment 38</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-08-19 05:21 PDT" data-time="1313756510">14 years ago</span> </div> </td> </tr> <tr id="ctag-38"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-38" data-comment-id="5665167">What about the about:config option? No discussion about that? :-(</div></div><div class="change-set" id="a43110185_14701"><div class="change" id="aa43110185_14701"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_14701" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/60e8d4680b2951023e8396b48b3daff7?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_14701" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=14701" > <span class="fna">Christopher Blizzard (:blizzard)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a43110185_14701" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a43110185_14701"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a43110185_14701">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-23 16:41 PDT" data-time="1316821266">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Keywords: <a href="/buglist.cgi?keywords=dev-doc-needed&resolution=---">dev-doc-needed</a></div><div class="change">Whiteboard: potential website fallout from new feature → potential website fallout from new feature (for docs, see comment 24)</div></div></div><div class="change-set" id="c39"><div class="comment" data-id="5741829" data-no="39" data-tags=""> <table class="layout-table change-head " id="ch-39" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425755" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/ad46378d8df346afcfb1e8c176423640?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425755" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=425755" > <span class="fna">Ken W.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-39" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-39" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c39">Comment 39</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-27 16:45 PDT" data-time="1317167147">13 years ago</span> </div> </td> </tr> <tr id="ctag-39"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-39" data-comment-id="5741829">There was really no way to accomplish this that would prevent a website from resizing the main window while still allowing users to accomplish the same using bookmarklets? This "solution" has effectively wiped out whole swaths of workflow for organizations that use bookmarklets to allow their Firefox users to organize thin client windows running within their browsers. There needs to be an option to turn this off — at minimum.</div></div><div class="change-set" id="c40"><div class="comment" data-id="5741832" data-no="40" data-tags=""> <table class="layout-table change-head " id="ch-40" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425755" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/ad46378d8df346afcfb1e8c176423640?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425755" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=425755" > <span class="fna">Ken W.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-40" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-40" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c40">Comment 40</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-27 16:46 PDT" data-time="1317167207">13 years ago</span> </div> </td> </tr> <tr id="ctag-40"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-40" data-comment-id="5741832">(In reply to matthias koplenig from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c35">comment #35</a>) <span class="quote">> (In reply to <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c34">comment #34</a>) > > You could use an existing addon such as > > <a rel="nofollow" href="https://addons.mozilla.org/en-US/firefox/addon/firesizer/">https://addons.mozilla.org/en-US/firefox/addon/firesizer/</a>. > > true. while this is a possiblity, the old way of having a bookmarklet to > change the size of the window was far more convenient (and one addon less to > worry about). *sad to see it go*</span > Not true. At its latest update, Firesizer is apparently not compatible with Firefox 7.</div></div><div class="change-set" id="c41"><div class="comment" data-id="5742127" data-no="41" data-tags=""> <table class="layout-table change-head " id="ch-41" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a43110185_14701"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a43110185_14701"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-41" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-41" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c41">Comment 41</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-27 19:22 PDT" data-time="1317176570">13 years ago</span> </div> </td> </tr> <tr id="ctag-41"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-41" data-comment-id="5742127"><span class="quote">> while still allowing users to accomplish the same using bookmarklets?</span > The whole point of bookmarklets is to run with _exactly_ the same permissions as the currently loaded site. So no, there is no way to let bookmarklets do things that sites can't do. An addon, of course, can do whatever resizing it wants. That's the right way to handle the use case described in <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c39">comment 39</a>.</div></div><div class="change-set" id="c42"><div class="comment" data-id="5742165" data-no="42" data-tags=""> <table class="layout-table change-head " id="ch-42" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425763" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/9094cffbe2a8e82189e809c48d987716?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425763" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=425763" > <span class="fna">swagstaff</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-42" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-42" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c42">Comment 42</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-27 20:00 PDT" data-time="1317178833">13 years ago</span> </div> </td> </tr> <tr id="ctag-42"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-42" data-comment-id="5742165">I'm also here to whine about broken window moving/resizing bookmarklets. Firesizer addon doesn't do cool stuff like "Resize window to half the available width, all the available height and put it on the right side of any screen, no matter its size." I'm pretty annoyed that I have to become an addon developer to replace a homebrewed three-line javascript. I'm ok with a config to turn off this behavior.</div></div><div class="change-set" id="c43"><div class="comment" data-id="5742547" data-no="43" data-tags=""> <table class="layout-table change-head " id="ch-43" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_14006" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/4307f29a5e955ad308b790df81138d5d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_14006" id="a43110185_14701"><a class="email " href="/user_profile?user_id=14006" > <span class="fna">neil@parkwaycc.co.uk</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-43" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-43" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c43">Comment 43</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 01:33 PDT" data-time="1317198823">13 years ago</span> </div> </td> </tr> <tr id="ctag-43"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-43" data-comment-id="5742547">Seeing as there are now very few resizable windows left (basically just popups that only contain their original tab) would it make any sense for the existing pref to override the restriction the other way, i.e. allow all windows?</div></div><div class="change-set" id="c44"><div class="comment" data-id="5742743" data-no="44" data-tags=""> <table class="layout-table change-head " id="ch-44" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425755" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/ad46378d8df346afcfb1e8c176423640?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425755" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=425755" > <span class="fna">Ken W.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-44" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-44" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c44">Comment 44</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 03:53 PDT" data-time="1317207224">13 years ago</span> </div> </td> </tr> <tr id="ctag-44"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-44" data-comment-id="5742743">(In reply to Boris Zbarsky (:bz) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c41">comment #41</a>) <span class="quote">> The whole point of bookmarklets is to run with _exactly_ the same > permissions as the currently loaded site. So no, there is no way to let > bookmarklets do things that sites can't do.</span > I admit I'm not a developer. I only created my Bugzilla account yesterday, specifically to address this one issue. I couldn't have told you how Firefox handles permissions for bookmarklets vs. permissions for a site-loaded page. From the far more general perspective of a user, however, I'd disagree with your assertion that the whole point of bookmarklets is that they should be handled the same way. Ideally, you'd clearly want Firefox to view actions taken by (possibly harmful) code embedded in a site one way, and the intentional actions taken by a user (like selecting a bookmark/bookmarlet from a Firefox menu) another way. (In reply to Boris Zbarsky (:bz) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c41">comment #41</a>) <span class="quote">> An addon, of course, can do whatever resizing it wants. That's the right > way to handle the use case described in <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c39">comment 39</a>.</span > I'm still looking for an add-on that handles resizing/repositioning, and I'm not in a position to create one. If you're aware of one that exists, please pass it on. Firesizer, mentioned above, isn't it — it apparently doesn't address repositioning, and isn't even FF7 compatible, anyway.</div></div><div class="change-set" id="c45"><div class="comment" data-id="5742817" data-no="45" data-tags=""> <table class="layout-table change-head " id="ch-45" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425800" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/d0a7d1502a575c3b26983dde80d92a75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425800" id="a43110185_14701"><a class="email " href="/user_profile?user_id=425800" > <span class="fna">C. Bollmeyer</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-45" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-45" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c45">Comment 45</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 05:10 PDT" data-time="1317211850">13 years ago</span> </div> </td> </tr> <tr id="ctag-45"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-45" data-comment-id="5742817">(In reply to Mounir Lamouri (:volkmar) (:mounir) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c24">comment #24</a>) <span class="quote">> Created <span class=""><a href="/attachment.cgi?id=525540" name="attach_525540" title="Part 2 - Prevent abusively moving/resizing window">attachment 525540</a> <a href="/attachment.cgi?id=525540&action=edit" title="Part 2 - Prevent abusively moving/resizing window">[details]</a> <a href="/attachment.cgi?id=525540&action=diff" title="Part 2 - Prevent abusively moving/resizing window">[diff]</a></span> <a href='/page.cgi?id=splinter.html&ignore=&bug=565541&attachment=525540'>[review]</a> [diff] [details] [review] > Part 2 - Prevent abusively moving/resizing window > > Two rules: > 1. Can't resize a window/tab that hasn't been created by window.open. > 2. Can't resize a tab if the tab is in a window with more than one tab. > > This is fixing the issue Jesse mentioned (popup can now resize themselves).</span > Sorry, but for us, the new resizing behaviour introduced in FF 7 seems to be BROKEN. 1. The TestCase (<span class=""><a href="/attachment.cgi?id=519510" name="attach_519510" title="testcase">Attachment 519510</a> <a href="/attachment.cgi?id=519510&action=edit" title="testcase">[details]</a></span>) does NOT work (Windows 7 x64, same on Vista 32). Clicking 'Open Popup' opens a new window (full-screen). Clicking 'Resize popup' just does nothing. 2. We're not exactly a porn site, but a software development company that develops and sells a complex JEE application for use in legal departments, workers unions and Fortune 500 enterprise customers. The software makes extensive use of popup dialogs which auto-resize themselves after opening based on the content displayed. We cannot use JS overlay dialogs, because we need a 'true' window target for displaying error messages. We cannot easily pre-determine popup sizes, as some content (eg. selection lists) can be of variable length and/or width. Plus, a the app is themeable, the final size of the popup window is determined by several factors (font sizes, screen resolutions, dpi) and so on. Finally, we simply cannot recode our entire UI just because of FF 7 support. Dropping the possibility of auto-resizing popup dialogs as it currently is in FF 7 totally breaks our app's usability. For us, this really is a show-stopper bug that will force us to drop FF 7 from our system requirements list and explicitly exclude it in any SLAs. This is particularly sad as we saw FF slowly, but steadily gaining ground in the enterprise area during the last year, commonly serving as the 'alternative' browser to the still dominant IE. To sum it up, here is what we need: 1. Open a popup window on button/link click (window.open()). 2. After opening, it must be possible to resize this dialog window to dynamically fit its contents. We commonly use a <div> within the dialog to determine the exact dimensions, calling window.resizeBy(iW, iH) from within the popup contents. 3. Finally, the dialog is centered on screen. Sadly, about:config is NOT an option in enterprise environments.</div></div><div class="change-set" id="c46"><div class="comment" data-id="5743069" data-no="46" data-tags=""> <table class="layout-table change-head " id="ch-46" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a43110185_14701"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a43110185_14701"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-46" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-46" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c46">Comment 46</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 07:24 PDT" data-time="1317219869">13 years ago</span> </div> </td> </tr> <tr id="ctag-46"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-46" data-comment-id="5743069"><span class="quote">> The TestCase (<span class=""><a href="/attachment.cgi?id=519510" name="attach_519510" title="testcase">Attachment 519510</a> <a href="/attachment.cgi?id=519510&action=edit" title="testcase">[details]</a></span>) does NOT work </span > That's quite odd. It works correctly over here (admittedly, on Mac). The use case you describe should absolutely work; the patch is very careful to keep it working. Just to make sure, you're testing with Firefox 7 and a clean profile?</div></div><div class="change-set" id="c47"><div class="comment" data-id="5743272" data-no="47" data-tags=""> <table class="layout-table change-head " id="ch-47" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_425800" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/d0a7d1502a575c3b26983dde80d92a75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_425800" id="a43110185_14701"><a class="email " href="/user_profile?user_id=425800" > <span class="fna">C. Bollmeyer</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-47" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-47" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c47">Comment 47</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 08:40 PDT" data-time="1317224410">13 years ago</span> </div> </td> </tr> <tr id="ctag-47"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-47" data-comment-id="5743272">Many thanks for you comment, as it helped us to find the source of the problem and finally saved us some sleepless nights :-) Well, we had tested the FF 7 upgrade on four different machines (one Vista 32, two Windows 7 x64 and one iMac running Snow Leopard. All FF7 installations were upgrades from FF 6.0.2, German version, some of them having a really long upgrade history since FF 2 or even before (as in the real world). We had not tried an entirely fresh installation yet, so we fired up a Virtual Box running the Windows 8 Developer Preview which had absolutely no Mozilla software on it before and installed FF 7 (English version, as the Preview is also English) from scratch. To our utter astonishment, FF 7 worked as expected on that box. Hooray! So we set up a new profile from scratch on a Win 7 box and that also worked. Then we tried running an existing installation one of the developer machines in safe mode, and that also worked. So the culprit was not FF7, but some add-in we all had installed in common. Iteratively disabling all suspicious add-ins, both ColorZilla and WebDeveloper proved to be innocent. FireBug 1.8.3 indeed was not. Oddly enough, it had worked without any problems for years, surviving all the upgrades in-between, but we can easily fall back to Chrome if necessary. So, for what it's worth, the resizing thing seems to be incompatible to FireBug, but works otherwise. Luckily, Firebug is nothing a corporate end user is expected to have installed. Management is content and happy again. Time to go home now and have a beer or three :-) Thanks again and sorry for the inconvenience. FF 7 is great! -- Ch.</div></div><div class="change-set" id="c48"><div class="comment" data-id="5743339" data-no="48" data-tags=""> <table class="layout-table change-head " id="ch-48" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a43110185_14701"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a43110185_14701"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-48" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-48" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c48">Comment 48</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-28 09:04 PDT" data-time="1317225870">13 years ago</span> </div> </td> </tr> <tr id="ctag-48"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-48" data-comment-id="5743339">Uh... Firebug does indeed add content-targetable docshells to the main window, which this patch thinks are open tabs. They're in firebugOverlay.xul (the fbPanelBar1-browser and fbPanelBar2-browser). Jan, is there a reason those are content-targetable and not just content, exactly?</div></div><div class="change-set" id="c49"><div class="comment" data-id="5745818" data-no="49" data-tags=""> <table class="layout-table change-head " id="ch-49" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_303767" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/34b251cf082c202fb3160b1afb810001?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_303767" id="a43110185_14701"><a class="email " href="/user_profile?user_id=303767" > <span class="fna">Jan Honza Odvarko [:Honza] (always need-info? me)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-49" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-49" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c49">Comment 49</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 04:59 PDT" data-time="1317297574">13 years ago</span> </div> </td> </tr> <tr id="ctag-49"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-49" data-comment-id="5745818">(In reply to Boris Zbarsky (:bz) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c48">comment #48</a>) <span class="quote">> Jan, is there a reason those are content-targetable and not just content, > exactly?</span > There were couple of issues with the attribute already: <a rel="nofollow" href="http://code.google.com/p/fbug/issues/detail?id=4628">http://code.google.com/p/fbug/issues/detail?id=4628</a> and <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INCOMPLETE - iframe type=content-primary in XUL allows access to Components" href="/show_bug.cgi?id=665369">bug 665369</a> Since Firebug now uses <browser> instead of <iframe> I think the type attribute can be 'content'. Patch committed to Firebug SVN: <a rel="nofollow" href="http://code.google.com/p/fbug/source/detail?r=11993">http://code.google.com/p/fbug/source/detail?r=11993</a> Both mentioned issues tested (all ok) Will be included in Firebug 1.9a4 (released soon here: <a rel="nofollow" href="http://getfirebug.com/releases/firebug/1.9/">http://getfirebug.com/releases/firebug/1.9/</a>) Thanks for the report! Honza</div></div><div class="change-set" id="c50"><div class="comment" data-id="5747216" data-no="50" data-tags=""> <table class="layout-table change-head " id="ch-50" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_426055" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/248d820c4cc1b6eb7924c658c45443b5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_426055" id="a43110185_14701"><a class="email disabled" href="/user_profile?user_id=426055" > <span class="fna">zzzzBov</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-50" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-50" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c50">Comment 50</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 12:42 PDT" data-time="1317325346">13 years ago</span> </div> </td> </tr> <tr id="ctag-50"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-50" data-comment-id="5747216">Killing off the window resizing functionality was a bad idea. I understand the usability implications for sites that choose to resize windows, and it is unfortunate that many sites *abuse* the ability to resize windows. I would like to propose the following functionality for resizing windows: * A window may not be resized smaller than would allow for the display of the window handles and necessary buttons * A window may not be resized larger than the largest screen it can occupy * a page may resize itself and any pages it has created * if a particular page shares a window with a page that it did *not* create, the page is popped out of the original window into its own window, and then resized * if child pages existed within the original window, they are left where they were As it is, there is an option to "Allow Scripts to move or resize existing windows". Currently this option does not work, and needs to be fixed. If the resizing windows functionality is removed completely, the option needs to be removed as well.</div></div><div class="change-set" id="c51"><div class="comment" data-id="5748306" data-no="51" data-tags=""> <table class="layout-table change-head " id="ch-51" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a43110185_14701"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a43110185_14701"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-51" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-51" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c51">Comment 51</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 17:38 PDT" data-time="1317343118">13 years ago</span> </div> </td> </tr> <tr id="ctag-51"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-51" data-comment-id="5748306">updated: <a rel="nofollow" href="https://developer.mozilla.org/en/Firefox_7_for_developers#section_6">https://developer.mozilla.org/en/Firefox_7_for_developers#section_6</a> To be done: <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeBy">https://developer.mozilla.org/en/DOM/window.resizeBy</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeBy">https://developer.mozilla.org/en/DOM/window.resizeBy</a></div></div><div class="change-set" id="a43632473_129809"><div class="change" id="aa43632473_129809"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a43632473_129809"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a43632473_129809"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a43632473_129809" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a43632473_129809"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a43632473_129809">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 17:45 PDT" data-time="1317343554">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INVALID - resizeTo and resizeBy do nothing" href="/show_bug.cgi?id=689974">689974</a></div></div></div><div class="change-set" id="c52"><div class="comment" data-id="5748468" data-no="52" data-tags=""> <table class="layout-table change-head " id="ch-52" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a43632473_129809"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a43632473_129809"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-52" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-52" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c52">Comment 52</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 19:04 PDT" data-time="1317348277">13 years ago</span> </div> </td> </tr> <tr id="ctag-52"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-52" data-comment-id="5748468">BTW, I wonder what the "tracking-firefox7:+" flag is expected to do for bugs like this. Was there a release note, any documentation, a blog entry? Any tiny try to inform web developers about this before things break unexpectedly? I haven't seen it. dev-doc-needed keyword was added 3 days before release. Seriously: What's the point with that flag here?</div></div><div class="change-set" id="c53"><div class="comment" data-id="5748473" data-no="53" data-tags=""> <table class="layout-table change-head " id="ch-53" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_383227" id="a43632473_129809"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_383227" id="a43632473_129809"><a class="email disabled" href="/user_profile?user_id=383227" > <span class="fna">Frank Yan (:fryn)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-53" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-53" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c53">Comment 53</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 19:09 PDT" data-time="1317348565">13 years ago</span> </div> </td> </tr> <tr id="ctag-53"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-53" data-comment-id="5748473">(In reply to j.j. from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c52">comment #52</a>) <span class="quote">> Any tiny try to > inform web developers about this before things break unexpectedly? I haven't > seen it.</span > For the most part, this only breaks web pages that are using this in ways that already break things. We are still allowing popup windows to resize themselves. We simply aren't allowing tabs in full-UI main browser windows to resize themselves, because they affect other tabs. In other words, we're actually fixing a lot more breakage than we're causing.</div></div><div class="change-set" id="c54"><div class="comment" data-id="5748477" data-no="54" data-tags=""> <table class="layout-table change-head " id="ch-54" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a43632473_129809"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a43632473_129809"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-54" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-54" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c54">Comment 54</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 19:14 PDT" data-time="1317348857">13 years ago</span> </div> </td> </tr> <tr id="ctag-54"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-54" data-comment-id="5748477">Frank, that's not my point. I'm personally happy with this fix.</div></div><div class="change-set" id="c55"><div class="comment" data-id="5748592" data-no="55" data-tags=""> <table class="layout-table change-head " id="ch-55" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_5003" id="a43632473_129809"><img src="https://secure.gravatar.com/avatar/4c29696cb5fe35b184e1221706f87874?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_5003" id="a43632473_129809"><a class="email " href="/user_profile?user_id=5003" > <span class="fna">Asa Dotzler [:asa]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-55" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-55" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c55">Comment 55</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 20:55 PDT" data-time="1317354935">13 years ago</span> </div> </td> </tr> <tr id="ctag-55"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-55" data-comment-id="5748592">(In reply to j.j. from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c52">comment #52</a>) <span class="quote">> BTW, I wonder what the "tracking-firefox7:+" flag is expected to do for bugs > like this.</span > Tracking means that the release team was interested in watching this as it made its way through the channels. It's not supposed to "do" anything.</div></div><div class="change-set" id="a43645135_5842"><div class="change" id="aa43645135_5842"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_5842" id="a43645135_5842"><img src="https://secure.gravatar.com/avatar/e9388eb9cf1a0eb509c4dc3686e66ca5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_5842" id="a43645135_5842"><a class="email " href="/user_profile?user_id=5842" > <span class="fna">Masatoshi Kimura [:emk]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a43645135_5842" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a43645135_5842"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a43645135_5842">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 21:16 PDT" data-time="1317356216">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Clarify popup-only move/resize window preference label" href="/show_bug.cgi?id=690648">690648</a></div></div></div><div class="change-set" id="c56"><div class="comment" data-id="5748713" data-no="56" data-tags=""> <table class="layout-table change-head " id="ch-56" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a43645135_5842"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a43645135_5842"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-56" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-56" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c56">Comment 56</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-29 22:51 PDT" data-time="1317361867">13 years ago</span> </div> </td> </tr> <tr id="ctag-56"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-56" data-comment-id="5748713"><span class="quote">> what the "tracking-firefox7:+" flag is expected to do for bugs like this.</span > Make sure that the release team will keep an eye out for regressions from the bug that would make shipping it not OK. For example, if we'd had widely-reported site breakage as a result of this change. The definition of "widely" is somewhat open-ended there. That also relies on people flagging actual reports of breakage as blocking the bug that caused it, of course.</div></div><div class="change-set" id="c57"><div class="comment" data-id="5751237" data-no="57" data-tags=""> <table class="layout-table change-head " id="ch-57" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a43645135_5842"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a43645135_5842"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-57" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-57" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c57">Comment 57</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-09-30 17:48 PDT" data-time="1317430113">13 years ago</span> </div> </td> </tr> <tr id="ctag-57"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-57" data-comment-id="5751237">(In reply to Boris Zbarsky (:bz) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c56">comment #56</a>) <span class="quote">> That also relies on people flagging actual reports of breakage as blocking > the bug that caused it, of course.</span > I bet that most people who actually do first-step-bug-tracking didn't realise that this is fixed, including me. (And if they did, very most of them woudn't add the dependency) There is something broken with the process. I assume we have paid people to improve this. And yes, this bug is not the best example or my complaint. There were others in the past. </rant></div></div><div class="change-set" id="a44025810_97012"><div class="change" id="aa44025810_97012"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_97012" id="a44025810_97012"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_97012" id="a44025810_97012"><a class="email " href="/user_profile?user_id=97012" > <span class="fna">:aceman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a44025810_97012" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a44025810_97012"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a44025810_97012">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-04 07:01 PDT" data-time="1317736891">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED INVALID - Window resizing from JS (moveTo, resizeTo, etc) doesn't work when Firebug is installed" href="/show_bug.cgi?id=691693">691693</a></div></div></div><div class="change-set" id="a44026281_129809"><div class="change" id="aa44026281_129809"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a44026281_129809"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a44026281_129809"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a44026281_129809" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a44026281_129809"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a44026281_129809">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-04 07:09 PDT" data-time="1317737362">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - window.moveTo and window.resizeTo not updating window" href="/show_bug.cgi?id=691726">691726</a></div></div></div><div class="change-set" id="c58"><div class="comment" data-id="5757277" data-no="58" data-tags=""> <table class="layout-table change-head " id="ch-58" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a44026281_129809"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a44026281_129809"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-58" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-58" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c58">Comment 58</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-04 07:16 PDT" data-time="1317737814">13 years ago</span> </div> </td> </tr> <tr id="ctag-58"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-58" data-comment-id="5757277"><span class="quote">> To be done: > <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeBy">https://developer.mozilla.org/en/DOM/window.resizeBy</a> > <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeBy">https://developer.mozilla.org/en/DOM/window.resizeBy</a></span > also: <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.moveby">https://developer.mozilla.org/en/DOM/window.moveby</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.moveto">https://developer.mozilla.org/en/DOM/window.moveto</a></div></div><div class="change-set" id="a44028469_97012"><div class="change" id="aa44028469_97012"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_97012" id="a44028469_97012"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_97012" id="a44028469_97012"><a class="email " href="/user_profile?user_id=97012" > <span class="fna">:aceman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a44028469_97012" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a44028469_97012"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a44028469_97012">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-04 07:45 PDT" data-time="1317739550">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">No longer depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - window.moveTo and window.resizeTo not updating window" href="/show_bug.cgi?id=691726">691726</a></div></div></div><div class="change-set" id="a44058998_11608"><div class="change" id="aa44058998_11608"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a44058998_11608"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a44058998_11608" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a44058998_11608"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a44058998_11608">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-04 16:14 PDT" data-time="1317770079">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Blocks: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Malicious web site resizes Firefox and calls alert(), making it seem as if Firefox has crashed and offering a sketchy "solution"" href="/show_bug.cgi?id=402401">402401</a></div></div></div><div class="change-set" id="c59"><div class="comment" data-id="5774879" data-no="59" data-tags=""> <table class="layout-table change-head " id="ch-59" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_154481" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/9f42a0845222bca467550ee704c48893?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_154481" id="a44058998_11608"><a class="email " href="/user_profile?user_id=154481" > <span class="fna">David McRitchie</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-59" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-59" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c59">Comment 59</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-11 10:06 PDT" data-time="1318352765">13 years ago</span> </div> </td> </tr> <tr id="ctag-59"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-59" data-comment-id="5774879">Makes me wonder if developers really use Firefox. Tools > Options > Content > Javascript: Advanced allows the user to prevent resizing. I almost always allow these to happen unless something causes a problem and tries to take over my machine. The days of user control and customization are numbered, bad programs will take over. I just lost 27 resize/move bookmarklets to put windows exactly where and how I want them and would have added to them.</div></div><div class="change-set" id="c60"><div class="comment" data-id="5777010" data-no="60" data-tags=""> <table class="layout-table change-head assignee" id="ch-60" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a44058998_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-60" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-60" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c60">Comment 60</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-12 03:00 PDT" data-time="1318413624">13 years ago</span> </div> </td> </tr> <tr id="ctag-60"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-60" data-comment-id="5777010">(In reply to David McRitchie from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c59">comment #59</a>) <span class="quote">> Makes me wonder if developers really use Firefox. Tools > Options > Content > > Javascript: Advanced allows the user to prevent resizing.</span > This option gives the user the possibility [if unchecked] to prevent all move or resize even those made on popups which could be legitimate and needed for many reasons. If checked, it will allow all move or resize even those that are going to be really painful for the user like resizing the main window. With this patch I believe this option is no longer required because we prevent known to be bad resize and move and allow the other ones.</div></div><div class="change-set" id="c61"><div class="comment" data-id="5777166" data-no="61" data-tags=""> <table class="layout-table change-head " id="ch-61" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a44058998_11608"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-61" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-61" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c61">Comment 61</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-12 05:33 PDT" data-time="1318422786">13 years ago</span> </div> </td> </tr> <tr id="ctag-61"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-61" data-comment-id="5777166"><span class="quote">> Tools > Options > Content > Javascript: Advanced allows the user to prevent resizing </span > See <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Clarify popup-only move/resize window preference label" href="/show_bug.cgi?id=690648">bug 690648</a></div></div><div class="change-set" id="c62"><div class="comment" data-id="5796160" data-no="62" data-tags=""> <table class="layout-table change-head " id="ch-62" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_399411" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/c43978727926bed201399816f7efb45d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_399411" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=399411" > <span class="fna">josephj</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-62" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-62" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c62">Comment 62</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-20 20:04 PDT" data-time="1319166281">13 years ago</span> </div> </td> </tr> <tr id="ctag-62"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-62" data-comment-id="5796160">From previous comments, I understand my FF 7.0.1 upgrading from FF 6 can't work. And I've made sure that the fresh installation of FF 7.0.1 on my virtual machine works. I just worry about what would happen if user gets next FF release? Will window.resize* works fine in the new opened window? Or we need suggest them to install a fresh new Firefox?</div></div><div class="change-set" id="c63"><div class="comment" data-id="5796753" data-no="63" data-tags=""> <table class="layout-table change-head assignee" id="ch-63" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a44058998_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-63" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-63" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c63">Comment 63</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-21 07:29 PDT" data-time="1319207366">13 years ago</span> </div> </td> </tr> <tr id="ctag-63"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-63" data-comment-id="5796753">(In reply to josephj from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c62">comment #62</a>) <span class="quote">> From previous comments, I understand my FF 7.0.1 upgrading from FF 6 can't > work.</span > What do you mean?</div></div><div class="change-set" id="c64"><div class="comment" data-id="5799687" data-no="64" data-tags=""> <table class="layout-table change-head " id="ch-64" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_399411" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/c43978727926bed201399816f7efb45d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_399411" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=399411" > <span class="fna">josephj</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-64" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-64" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c64">Comment 64</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-23 17:56 PDT" data-time="1319417779">13 years ago</span> </div> </td> </tr> <tr id="ctag-64"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-64" data-comment-id="5799687">In <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c46">comment #46</a>, it mentions "Firefox 7 and a clean profile". My situation is similar... that FF 7.0.1 upgrading from 6 can't do window.resizeBy() in a new opened window, but a new installed FF 7.0.1 does. It's difficult to ask our users to fix existing profile. Just wondering if it's possible to fix profile automatically in the next versions. (In reply to Mounir Lamouri (:volkmar) (:mounir) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c63">comment #63</a>) <span class="quote">> (In reply to josephj from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c62">comment #62</a>) > > From previous comments, I understand my FF 7.0.1 upgrading from FF 6 can't > > work. > > What do you mean?</span ></div></div><div class="change-set" id="c65"><div class="comment" data-id="5799704" data-no="65" data-tags=""> <table class="layout-table change-head " id="ch-65" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a44058998_11608"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a44058998_11608"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-65" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-65" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c65">Comment 65</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-23 18:30 PDT" data-time="1319419847">13 years ago</span> </div> </td> </tr> <tr id="ctag-65"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-65" data-comment-id="5799704">The only reason I asked about a clean profile is to eliminate extensios as the culprit. And as <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c47">comment 47</a> and <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c48">comment 48</a> say, there is indeed an old bug in Firebug that breaks window resizing as of Firefox 7. In a clean profile with no Firebug installed the problem goes away, of course. So if in your case the upgraded Firefox 7 has Firebug installed, you're seeing that. If that's the case, it should not affect your users unless they have Firebug installed, and even if they do it should work once Firebug ships a fix for their issue. If you do _not_ have Firebug installed but are seeing window resizing not work, please file a separate bug and cc me on it.</div></div><div class="change-set" id="c66"><div class="comment" data-id="5799720" data-no="66" data-tags=""> <table class="layout-table change-head " id="ch-66" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a44058998_11608"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-66" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-66" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c66">Comment 66</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-23 19:00 PDT" data-time="1319421635">13 years ago</span> </div> </td> </tr> <tr id="ctag-66"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-66" data-comment-id="5799720">(it's fixed in Firebug 1.9a4) <a rel="nofollow" href="http://blog.getfirebug.com/">http://blog.getfirebug.com/</a></div></div><div class="change-set" id="c67"><div class="comment" data-id="5799827" data-no="67" data-tags=""> <table class="layout-table change-head " id="ch-67" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_154481" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/9f42a0845222bca467550ee704c48893?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_154481" id="a44058998_11608"><a class="email " href="/user_profile?user_id=154481" > <span class="fna">David McRitchie</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-67" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-67" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c67">Comment 67</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-23 23:01 PDT" data-time="1319436060">13 years ago</span> </div> </td> </tr> <tr id="ctag-67"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-67" data-comment-id="5799827"><a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c60">Comment #60</a> and #64 -- I sure hope "Alice White" or someone comes to our rescue with an extension to reverse all of this so we can resize, move with JavaScript, run Janascript from the location bar once more, and have the JavaScript controls in Tools > Options > Content still be able to allow or restrict "Move or resize existing windows", "Raise or lower windows", "Disable or replace context menus". I have hardly ever had a problem with sites because I can control the bad ones that that look like a virus scanner (twice). Never had any real problem with legitimate pages, and I resized windows thousands of times (several times a day) with bookmarks invoked from the location bar. This change is not going to stop add-ons and programs from doing anything, and just makes Firefox a bad application like what it is being changed to stop. The other browsers are not doing this, at least not yet. Many of us switched to Firefox because we had control and could customize. The ability to place windows side by side in Windows 7 is a good feature, but my bookmarks invoked from the location bar can (could) make Firefox windows any size and position them where I wanted them.</div></div><div class="change-set" id="c68"><div class="comment" data-id="5799833" data-no="68" data-tags=""> <table class="layout-table change-head " id="ch-68" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_399411" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/c43978727926bed201399816f7efb45d?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_399411" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=399411" > <span class="fna">josephj</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-68" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-68" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c68">Comment 68</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-23 23:12 PDT" data-time="1319436725">13 years ago</span> </div> </td> </tr> <tr id="ctag-68"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-68" data-comment-id="5799833">(In reply to Boris Zbarsky (:bz) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c65">comment #65</a>) <span class="quote">> If you do _not_ have Firebug installed but are seeing window resizing not > work, please file a separate bug and cc me on it.</span > It's okay after I upgrade Firebug to 1.9.0a4. Thanks for your help. :-D</div></div><div class="change-set" id="c69"><div class="comment" data-id="5800766" data-no="69" data-tags=""> <table class="layout-table change-head " id="ch-69" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_303767" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/34b251cf082c202fb3160b1afb810001?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_303767" id="a44058998_11608"><a class="email " href="/user_profile?user_id=303767" > <span class="fna">Jan Honza Odvarko [:Honza] (always need-info? me)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-69" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-69" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c69">Comment 69</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-24 10:15 PDT" data-time="1319476522">13 years ago</span> </div> </td> </tr> <tr id="ctag-69"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-69" data-comment-id="5800766"><span class="quote">> It's okay after I upgrade Firebug to 1.9.0a4.</span > Thanks for the update! Honza</div></div><div class="change-set" id="c70"><div class="comment" data-id="5815518" data-no="70" data-tags=""> <table class="layout-table change-head " id="ch-70" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_154481" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/9f42a0845222bca467550ee704c48893?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_154481" id="a44058998_11608"><a class="email " href="/user_profile?user_id=154481" > <span class="fna">David McRitchie</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-70" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-70" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c70">Comment 70</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-31 10:10 PDT" data-time="1320081049">13 years ago</span> </div> </td> </tr> <tr id="ctag-70"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-70" data-comment-id="5815518">This change or one of its evil siblings also makes the AwesomeBar feature and bookmark sidebar/library searches not work properly. Can't find keyworded bookmarks that have JavaScript. or bookmarks with javascript. Test case involving a typical JavaScript example with code that users all over the world use to test and learn JavaScript Name: hello: howdy doody Location: javascript:alert("Hello%20World") Keyword: hello: Try AwesomeBar type string search from location bar, bookmarks sidebar/library on any of the following: (last is valid it is strings not words) javascript || hello world || alert || hello: || ello world</div></div><div class="change-set" id="c71"><div class="comment" data-id="5815756" data-no="71" data-tags=""> <table class="layout-table change-head " id="ch-71" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a44058998_11608"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a44058998_11608"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-71" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-71" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c71">Comment 71</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-10-31 11:22 PDT" data-time="1320085321">13 years ago</span> </div> </td> </tr> <tr id="ctag-71"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-71" data-comment-id="5815756">That has absolutely nothing to do with this bug. It does have to do with <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - Disallow javascript: and data: URLs entered into the location bar from inheriting the principal of the currently-loaded page" href="/show_bug.cgi?id=656433">bug 656433</a>, which has extensive discussion of the tradeoffs involved and the better suggested ways to test and learn JavaScript.</div></div><div class="change-set" id="c72"><div class="comment" data-id="5838206" data-no="72" data-tags=""> <table class="layout-table change-head " id="ch-72" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_244094" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/7b74ccf93dde7dd2ac5d2980d14fdc7b?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_244094" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=244094" > <span class="fna">Paul Lynch</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-72" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-72" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c72">Comment 72</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-09 13:12 PST" data-time="1320873121">13 years ago</span> </div> </td> </tr> <tr id="ctag-72"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-72" data-comment-id="5838206">There seems to be no security issue here; the report was just about web site behavior that was perceived to be annoying. I would like to point out two solutions that do not break existing web site code: 1) Do not visit web sites that annoy you. 2) If you must visit a web site that resizes your window, and you are annoyed by that, then open a new window for that web site before going to it. I think there needs to be some review process for changes like this (which are not bugs, and which break existing web sites) where web site developers (and perhaps users) could comment on the change before it is implemented.</div></div><div class="change-set" id="c73"><div class="comment" data-id="5838472" data-no="73" data-tags=""> <table class="layout-table change-head " id="ch-73" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_129809" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/5769ea27a1744c986f4ff3cf44674daf?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_129809" id="a44058998_11608"><a class="email " href="/user_profile?user_id=129809" > <span class="fna">j.j.</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-73" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-73" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c73">Comment 73</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-09 14:17 PST" data-time="1320877036">13 years ago</span> </div> </td> </tr> <tr id="ctag-73"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-73" data-comment-id="5838472"><span class="quote">> I think there needs to be some review process for changes like this </span > There should be some information process before posting such (to be frankly) nonsense, e.g. by reading this bug completely, including depending, blocking and duplicate bugs. (If you feel a need to respond, please do it in private mail and don't comment in the bug. See also <a rel="nofollow" href="https://bugzilla.mozilla.org/page.cgi?id=etiquette.html">https://bugzilla.mozilla.org/page.cgi?id=etiquette.html</a> point 2.2.)</div></div><div class="change-set" id="c74"><div class="comment" data-id="5839583" data-no="74" data-tags=""> <table class="layout-table change-head assignee" id="ch-74" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a44058998_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-74" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-74" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c74">Comment 74</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-10 02:17 PST" data-time="1320920262">13 years ago</span> </div> </td> </tr> <tr id="ctag-74"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-74" data-comment-id="5839583">(In reply to Paul Lynch from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c72">comment #72</a>) <span class="quote">> There seems to be no security issue here</span > If website A opens a popup P and changes the size of the main window (where A is) to make it smaller than P and behind P and then shows a message like "You have been victim of an attack that crashed your browser and stole your personal data, install this security software to prevent this to happen again!". That sounds like a serious security issue. And I'm not speaking of the DOS issues.</div></div><div class="change-set" id="c75"><div class="comment" data-id="5839886" data-no="75" data-tags=""> <table class="layout-table change-head " id="ch-75" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_426055" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/248d820c4cc1b6eb7924c658c45443b5?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_426055" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=426055" > <span class="fna">zzzzBov</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-75" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-75" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c75">Comment 75</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-10 06:15 PST" data-time="1320934508">13 years ago</span> </div> </td> </tr> <tr id="ctag-75"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-75" data-comment-id="5839886">(In reply to Mounir Lamouri from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c74">comment #74</a>) If a setting already exists to enable/disable resizing and moving windows, there is no reason to remove the feature. Instead, the default should be changed such that they are disabled by default, or another setting should be added so that a user can specify whether a page can resize windows with multiple tabs, which could default to false. Anyone foolish enough to fall for a security software scam isn't likely to change their default window resize settings.</div></div><div class="change-set" id="c76"><div class="comment" data-id="5843235" data-no="76" data-tags=""> <table class="layout-table change-head " id="ch-76" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_429451" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/b1bb3190b4cedd375483a728f875a089?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_429451" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=429451" > <span class="fna">mark.tempe</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-76" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-76" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c76">Comment 76</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-11 11:11 PST" data-time="1321038668">13 years ago</span> </div> </td> </tr> <tr id="ctag-76"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-76" data-comment-id="5843235">Thanks for saving me from all the bad guys trying to move and resize my Firefox window! I'm the most stupid user, who cannot configure his own browser. I really need Big Brother and finally I shall love him. What next? You could forbid the links because they probably lead to nasty pages. Tanks a lot! Really, great job!</div></div><div class="change-set" id="c77"><div class="comment" data-id="5847202" data-no="77" data-tags=""> <table class="layout-table change-head " id="ch-77" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_244094" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/7b74ccf93dde7dd2ac5d2980d14fdc7b?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_244094" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=244094" > <span class="fna">Paul Lynch</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-77" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-77" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c77">Comment 77</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-14 10:53 PST" data-time="1321296780">13 years ago</span> </div> </td> </tr> <tr id="ctag-77"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-77" data-comment-id="5847202">(In reply to Mounir Lamouri (:volkmar) (:mounir) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c74">comment #74</a>) <span class="quote">> (In reply to Paul Lynch from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c72">comment #72</a>) > > There seems to be no security issue here > > If website A opens a popup P and changes the size of the main window (where > A is) to make it smaller than P and behind P and then shows a message like > "You have been victim of an attack that crashed your browser and stole your > personal data, install this security software to prevent this to happen > again!". That sounds like a serious security issue. And I'm not speaking of > the DOS issues.</span > Thanks-- I had not thought of that. However, this is a case of a malicious website, in which case lots of bad things might happen. What if, to work around this change, website A resizes the pop-up to cover the original window? It might not be as visually convincing to an experienced user, but as long as the new window contained the same message, some people would still fall for it. My point is that this only eliminates some cases of malicious window resizing, and breaks legitimate uses of it. I can modify my website to deal with the change, but I would have liked some warning that it was coming. (Was it somewhere, that I missed, other than buried in bugzilla?) Even better, I would have liked if there had been some opportunity to give some feedback about what features of my website were about to be broken.</div></div><div class="change-set" id="c78"><div class="comment" data-id="5847239" data-no="78" data-tags=""> <table class="layout-table change-head " id="ch-78" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_20209" id="a44058998_11608"><img src="extensions/Gravatar/web/default.jpg" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_20209" id="a44058998_11608"><a class="email " href="/user_profile?user_id=20209" > <span class="fna">Boris Zbarsky [:bzbarsky]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-78" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-78" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c78">Comment 78</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-14 11:00 PST" data-time="1321297246">13 years ago</span> </div> </td> </tr> <tr id="ctag-78"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-78" data-comment-id="5847239">Paul, I'm not sure about warning; there are things like commit logs and blogs about recent changes, but we obviously don't expect web developers to follow them... So I'm not sure what form of warning would have been useful here. You always have the opportunity to give feedback, though: after any change is checked in there are 12 weeks of testing on the Aurora and Beta channels before it actually ships in a release (plus whatever testing it gets on the Nightly channel). I realize that testing the new Aurora build against your website every 6 weeks is a bit of a pain, though...</div></div><div class="change-set" id="c79"><div class="comment" data-id="5855240" data-no="79" data-tags=""> <table class="layout-table change-head assignee" id="ch-79" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_342786" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/f3bc800fde3724f78dc9e01e97b4f2e1?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_342786" id="a44058998_11608"><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> <span class="user-role">Assignee</span> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-79" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-79" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c79">Comment 79</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-17 06:54 PST" data-time="1321541689">13 years ago</span> </div> </td> </tr> <tr id="ctag-79"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-79" data-comment-id="5855240">Reading <a rel="nofollow" href="https://hacks.mozilla.org/">https://hacks.mozilla.org/</a> might be a good idea to learn about new changes in Firefox/Gecko. Actually, this change has been mentioned in the Firefox 7 article: <a rel="nofollow" href="https://hacks.mozilla.org/2011/09/whats-new-for-web-developers-in-firefox-7/">https://hacks.mozilla.org/2011/09/whats-new-for-web-developers-in-firefox-7/</a> As said Boris, running an Aurora or Beta build against your website sometimes might prevent bad surprises.</div></div><div class="change-set" id="c80"><div class="comment" data-id="5858784" data-no="80" data-tags=""> <table class="layout-table change-head " id="ch-80" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_244094" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/7b74ccf93dde7dd2ac5d2980d14fdc7b?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_244094" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=244094" > <span class="fna">Paul Lynch</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-80" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-80" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c80">Comment 80</a> </h3> • <div class="change-time"><span class="rel-time" title="2011-11-18 10:56 PST" data-time="1321642594">13 years ago</span> </div> </td> </tr> <tr id="ctag-80"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-80" data-comment-id="5858784">(In reply to Mounir Lamouri (:volkmar) (:mounir) from <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - Web sites shouldn't be allowed to resize main window" href="/show_bug.cgi?id=565541#c79">comment #79</a>) <span class="quote">> Actually, this change has been mentioned in the > Firefox 7 article: > <a rel="nofollow" href="https://hacks.mozilla.org/2011/09/whats-new-for-web-developers-in-firefox-7/">https://hacks.mozilla.org/2011/09/whats-new-for-web-developers-in-firefox-7/</a></span > Yes, and I should have paid more attention to that, because I do try to follow that blog. However, that article was released the day Firefox 7 was released (out of beta). At that point, web sites are already broken. It might even be too late to provide feedback when the change is in Aurora; at that point I gather that the change is approved and just being tested for bugs. What I was suggesting is that when a change to disable a certain feature is under consideration, and before it is implemented, there be some mechanism (whether a blog, a forum, or an email list) by which developers could be notified and have some opportunity to discuss the impact of the change.</div></div><div class="change-set" id="c81"><div class="comment" data-id="5962749" data-no="81" data-tags=""> <table class="layout-table change-head " id="ch-81" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_374863" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/7e6c0a216041d48fa163d471e5d71086?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_374863" id="a44058998_11608"><a class="email " href="/user_profile?user_id=374863" > <span class="fna">Florian Scholz (Open Web Docs)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-81" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-81" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c81">Comment 81</a> </h3> • <div class="change-time"><span class="rel-time" title="2012-01-07 03:05 PST" data-time="1325934353">13 years ago</span> </div> </td> </tr> <tr id="ctag-81"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-81" data-comment-id="5962749">Marking dev docs as complete now. <a rel="nofollow" href="https://developer.mozilla.org/en/Firefox_7_for_developers#DOM">https://developer.mozilla.org/en/Firefox_7_for_developers#DOM</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeBy">https://developer.mozilla.org/en/DOM/window.resizeBy</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.resizeTo">https://developer.mozilla.org/en/DOM/window.resizeTo</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.moveBy">https://developer.mozilla.org/en/DOM/window.moveBy</a> <a rel="nofollow" href="https://developer.mozilla.org/en/DOM/window.moveTo">https://developer.mozilla.org/en/DOM/window.moveTo</a></div><div class="activity"><div class="change">Keywords: <a href="/buglist.cgi?keywords=dev-doc-needed&resolution=---">dev-doc-needed</a> → <a href="/buglist.cgi?keywords=dev-doc-complete&resolution=---">dev-doc-complete</a></div></div></div><div class="change-set" id="c82"><div class="comment" data-id="6002258" data-no="82" data-tags=""> <table class="layout-table change-head " id="ch-82" role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_430962" id="a44058998_11608"><img src="https://secure.gravatar.com/avatar/38f882bd9119f4aa1d176ab583028fa3?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_430962" id="a44058998_11608"><a class="email disabled" href="/user_profile?user_id=430962" > <span class="fna">David Jefferson</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="cs-82" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="cr-82" > <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#c82">Comment 82</a> </h3> • <div class="change-time"><span class="rel-time" title="2012-01-23 14:12 PST" data-time="1327356751">13 years ago</span> </div> </td> </tr> <tr id="ctag-82"> <td colspan="2" class="comment-tags"> </td> </tr> </table> </div><div class="comment-text " id="ct-82" data-comment-id="6002258">I have a problem with this being marked VERIFIED FIXED without some kind of option, since allowing JavaScript to function as intended isn't a bug. Unilaterally disabling a specific function of a "supported" scripting language doesn't seem to be a fix to me. This needs option support or a whitelist. See <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INVALID - window.resizeTo and window.moveTo don't work" href="/show_bug.cgi?id=688841#c11">Bug 688841, comment 11</a> for a more detailed argument against this "fix".</div></div><div class="change-set" id="a53646076_11608"><div class="change" id="aa53646076_11608"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_11608" id="a53646076_11608"><img src="https://secure.gravatar.com/avatar/d2dc9227eafcd0ec5ba3712ee4f19b75?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_11608" id="a53646076_11608"><a class="email " href="/user_profile?user_id=11608" > <span class="fna">Jesse Ruderman</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a53646076_11608" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a53646076_11608"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a53646076_11608">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2012-01-23 14:19 PST" data-time="1327357157">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED INVALID - window.resizeTo and window.moveTo don't work" href="/show_bug.cgi?id=688841">688841</a></div></div></div><div class="change-set" id="a54929784_49577"><div class="change" id="aa54929784_49577"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_49577" id="a54929784_49577"><img src="https://secure.gravatar.com/avatar/2efb6d76c228cbd10284f1bf1ed9310a?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_49577" id="a54929784_49577"><a class="email " href="/user_profile?user_id=49577" > <span class="fna">Serge Gautherie (:sgautherie)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a54929784_49577" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a54929784_49577"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a54929784_49577">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2012-02-07 10:54 PST" data-time="1328640865">13 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Depends on: <a class="bz_bug_link bz_status_VERIFIED bz_closed" title="VERIFIED FIXED - [SeaMonkey] permanent "dom/tests/mochitest/bugs/test_resize_move_windows.html | Test timed out."" href="/show_bug.cgi?id=725015">725015</a></div></div></div><div class="change-set" id="a85416220_324370"><div class="change" id="aa85416220_324370"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_324370" id="a85416220_324370"><img src="https://secure.gravatar.com/avatar/3936e910765d9f86af52fab5c1b4e417?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_324370" id="a85416220_324370"><a class="email " href="/user_profile?user_id=324370" > <span class="fna">Joel Maher ( :jmaher ) (UTC -8)</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a85416220_324370" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a85416220_324370"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a85416220_324370">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2013-01-25 07:21 PST" data-time="1359127301">12 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Blocks: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - test_resize_move_windows.xul fails on an ubuntu 12.04 VM, causes 45 other failures" href="/show_bug.cgi?id=834716">834716</a></div></div></div><div class="change-set" id="a278773444_1"><div class="change" id="aa278773444_1"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_1" id="a278773444_1"><img src="https://secure.gravatar.com/avatar/eaa3c40fff208819d0810fc338eea0aa?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_1" id="a278773444_1"><a class="email " href="/user_profile?user_id=1" > <span class="fna">Nobody; OK to take it and work on it</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a278773444_1" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a278773444_1"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a278773444_1">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2019-03-13 06:42 PDT" data-time="1552484525">6 years ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Component: DOM → DOM: Core & HTML</div></div></div><div class="change-set" id="a439597002_1689"><div class="change" id="aa439597002_1689"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_1689" id="a439597002_1689"><img src="https://secure.gravatar.com/avatar/da6b54ad3fdb36ba7656df9adfe65d12?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_1689" id="a439597002_1689"><a class="email " href="/user_profile?user_id=1689" > <span class="fna">Daniel Veditz [:dveditz]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a439597002_1689" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a439597002_1689"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a439597002_1689">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2024-04-16 15:54 PDT" data-time="1713308083">11 months ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">Duplicate of this bug: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED DUPLICATE - restrict move/resize windows similarly to window.close()" href="/show_bug.cgi?id=458826">458826</a></div></div></div><div class="change-set" id="a439597632_1689"><div class="change" id="aa439597632_1689"> <table class="layout-table change-head " role="presentation"> <tr> <td rowspan="2" class="change-gravatar"><div class="vcard vcard_1689" id="a439597632_1689"><img src="https://secure.gravatar.com/avatar/da6b54ad3fdb36ba7656df9adfe65d12?d=mm&size=64" class="gravatar" width="32" height="32"> </div> </td> <td class="change-author"><div class="vcard vcard_1689" id="a439597632_1689"><a class="email " href="/user_profile?user_id=1689" > <span class="fna">Daniel Veditz [:dveditz]</span></a> </div> </td> <td rowspan="2" class="comment-actions"><div role="group"> <button type="button" class="change-spinner ghost iconic" id="as-a439597632_1689" aria-label="Collapse" aria-expanded="true" data-strings='{ "collapse_label": "Collapse", "expand_label": "Expanded" }'> <span class="icon" aria-hidden="true"></span> </button> </div></td> </tr> <tr id="ar-a439597632_1689"> <td> <h3 class="change-name"> <a href="/show_bug.cgi?id=565541#a439597632_1689">Updated</a> </h3> • <div class="change-time"><span class="rel-time" title="2024-04-16 16:05 PDT" data-time="1713308713">11 months ago</span> </div> </td> </tr> </table> </div><div class="activity"><div class="change">See Also: → <a class="bz_bug_link bz_status_NEW" title="NEW - Allow scripted resizing when window.close and window.open are allowed (consume user activation to prevent repeated abuse)" href="/show_bug.cgi?id=502561">502561</a></div></div></div><div id="new-comment-notice"> You need to <a href="/show_bug.cgi?id=565541&GoAheadAndLogIn=1">log in</a> before you can comment on or make changes to this bug. </div> <div id="bottom-actions"> <div id="bottom-right-actions"> <button type="button" id="top-btn" class="secondary" aria-label="Go to Page Top">Top ↑</button> </div> </div> <dialog id="att-overlay" class="readonly" aria-labelledby="att-overlay-title" data-attachment-count="7"> <form method="dialog"> <div class="header"> <h2 id="att-overlay-title" class="title">Attachment</h2> <div class="spacer"></div> <button type="button" class="secondary iconic" hidden disabled data-action="prev" title="Previous Attachment" aria-keyshortcuts="ArrowLeft"> <span class="icon" aria-hidden="true"></span> </button> <button type="button" class="secondary iconic" hidden disabled data-action="next" title="Next Attachment" aria-keyshortcuts="ArrowRight"> <span class="icon" aria-hidden="true"></span> </button> <button type="button" class="secondary" data-action="toggle-details">Hide Details</button> <button type="button" class="secondary iconic" data-action="close" aria-label="Close"> <span class="icon" aria-hidden="true"></span> </button> </div> <div class="body"> <div class="sub-column"> <div class="detail-pane"> <section class="cols"> <h3>General</h3> <div class="creator"> Creator: <div class="vcard vcard_342786" ><a class="email " href="/user_profile?user_id=342786" > <span class="fna">Mounir Lamouri (:mounir)</span></a> </div> </div> <div>Created: <span class="created-date rel-time"></span></div> <div>Updated: <span class="updated-date rel-time"></span></div> <div>Size: <span class="file-size"></span></div> </section> <section class="cols"> <h3> <label for="att-overlay-description">Description</label> </h3> <div> <input type="text" name="description" disabled id="att-overlay-description" class="flex"> </div> </section> <section class="cols"> <h3> <label for="att-overlay-file-name">File Name</label> </h3> <div> <input type="text" name="filename" disabled id="att-overlay-file-name" class="flex"> </div> </section> <section class="cols"> <h3> <label for="att-overlay-content-type">Content Type</label> </h3> <div> <input type="text" name="contenttypeentry" disabled id="att-overlay-content-type" class="flex"> </div> </section> </div> </div> <div class="main-column"> <div class="preview-pane"> <div class="preview "> </div> </div> </div> </div> <div class="footer"> <button type="button" class="secondary" data-action="raw">Raw</button> <button type="button" class="secondary" disabled data-action="diff">Diff</button> <button type="button" class="secondary" disabled data-action="review" data-base="https://bugzilla.mozilla.org/page.cgi?id=splinter.html&ignore=">Splinter Review</button> <div class="spacer"></div> </div> </form> </dialog> <link rel="stylesheet" href="/static/v20250219.1/extensions/FlagTypeComment/web/styles/ftc.css"> <script nonce="AjXeoaAT6b7f2H8qGQfFl5Oo3el8vgHPIEro2V08scuoqdl9" src="/static/v20250219.1/extensions/FlagTypeComment/web/js/ftc.js"></script></div> </main> </div> </body> </html>

CINXE.COM

565541 - Web sites shouldn't be allowed to resize main window