IE7 shows location even if location=no

Discussion in 'Javascript' started by John Bailo, Jan 19, 2007.

  1. John Bailo

    John Bailo Guest

    I'm doing a popup window.

    In my parameters I set location=no

    In FF20 and IE6 the location entry does not show.

    In IE7 it shows.

    Are there new parameters for displaying a popup window in IE7?

    --
    The Texeme Construct
     
    John Bailo, Jan 19, 2007
    #1
    1. Advertising

  2. John Bailo

    ASM Guest

    Gérard Talbot a écrit :
    >
    > MSIE 7 forces the presence of the Address Bar by default: "We think the
    > address bar is also important for users to see in pop-up windows. A
    > missing address bar creates a chance for a fraudster to forge an address
    > of their own.


    And what that change ? seeing this frauster's address or not ...

    > To help thwart that, IE7 will show the address bar on all
    > internet windows to help users see where they are."


    Bof !

    > http://blogs.msdn.com/ie/archive/2005/11/21.aspx
    >
    > Mozilla.org also intends to soon force the presence of the Location Bar
    > in Firefox 2:


    No ? Arggghhh !
    We already have the status bar :-(

    Is it to force Ajax development and use ?

    > Bug 337344: Change default dom.disable_window_open_feature.location to true
    > https://bugzilla.mozilla.org/show_bug.cgi?id=337344
    >
    > Any Mozilla-based browsers (Firefox 1.x, Seamonkey, NS 7.x, K-meleon
    > 1.x, etc) can force the presence of location bar with the user setting
    > the dom.disable_window_open_feature.location property value to true


    Who knows and is able to do that ?
    Not me.
    With FF 2.0.0.1 I haven't address bar if not asked in window.open()
    here :
    http://stephane.moriaux.perso.wanadoo.fr/truc/tutticanti/
    the link 'test' open a so popup (if allowed of course).

    --
    Stephane Moriaux et son (moins) vieux Mac déjà dépassé
    Stephane Moriaux and his (less) old Mac already out of date
     
    ASM, Jan 19, 2007
    #2
    1. Advertising

  3. John Bailo

    John Bailo Guest

    Gérard Talbot wrote:

    > MSIE 7 forces the presence of the Address Bar by default: "We think the
    > address bar is also important for users to see in pop-up windows. A
    > missing address bar creates a chance for a fraudster to forge an address
    > of their own.


    In my case, the parent and the popup are both from the same webserver,
    but the parent uses https and the popup doesn't!

    (It's a dojo application, and I thought using http instead of https
    would save downloading!)

    > Mozilla.org also intends to soon force the presence of the Location Bar
    > in Firefox 2:


    What a drag!

    --
    The Texeme Construct
     
    John Bailo, Jan 19, 2007
    #3
  4. John Bailo

    Jeff Guest


    > In my case, the parent and the popup are both from the same webserver,
    > but the parent uses https and the popup doesn't!
    >
    > (It's a dojo application, and I thought using http instead of https
    > would save downloading!)



    So are you saying if they are both using https, then the location bar
    goes away?

    I've noticed if I use a localhost http server, then there are no
    location bars in popups, but if I use a remote server somewhere on my
    domain, then the location bars appear. This tells me there are some
    situations where IE7 does not see a need for location bar display
    forcing and I just wonder what all those types of configurations are.

    For example, why force display of the location bar if both URLs are
    from the same domain? (opener window, popup window) This seems
    absolutely pointless to me. If it's anti-phishing, then it should
    force display when the domains or the servers do not match.

    For another example, XmlHttp does not allow comm between two different
    servers on the same domain, as a security precaution (over zealous in
    my mind, why not just limit the same as the browser, to one domain?).

    This seems like a situation where the user might want to know that two
    different servers are being used to feed the parent and the popup, and
    therefor the location bar is displayed. But not if they both are
    served from the same http server machine and port, then why bother?

    jeff papineau
    surfyogiATgmailDOTcom
     
    Jeff, Mar 9, 2007
    #4
  5. John Bailo

    OmegaJunior Guest

    On Fri, 09 Mar 2007 01:23:50 +0100, Jeff <> wrote:

    >
    >> In my case, the parent and the popup are both from the same webserver,
    >> but the parent uses https and the popup doesn't!
    >>
    >> (It's a dojo application, and I thought using http instead of https
    >> would save downloading!)

    >
    >
    > So are you saying if they are both using https, then the location bar
    > goes away?
    >
    > I've noticed if I use a localhost http server, then there are no
    > location bars in popups, but if I use a remote server somewhere on my
    > domain, then the location bars appear. This tells me there are some
    > situations where IE7 does not see a need for location bar display
    > forcing and I just wonder what all those types of configurations are.
    >
    > For example, why force display of the location bar if both URLs are
    > from the same domain? (opener window, popup window) This seems
    > absolutely pointless to me. If it's anti-phishing, then it should
    > force display when the domains or the servers do not match.
    >
    > For another example, XmlHttp does not allow comm between two different
    > servers on the same domain, as a security precaution (over zealous in
    > my mind, why not just limit the same as the browser, to one domain?).
    >
    > This seems like a situation where the user might want to know that two
    > different servers are being used to feed the parent and the popup, and
    > therefor the location bar is displayed. But not if they both are
    > served from the same http server machine and port, then why bother?
    >
    > jeff papineau
    > surfyogiATgmailDOTcom
    >


    On that note, why would you assume the audacity to change the user's
    computer at all? The browser is the user's property, not the author's. The
    fact that IE7 allows an author to remove the address bar at all is pure
    arrogance. Keep your hands off of my browser! Your domain is the contents
    of the window, not the window itself. That's mine.

    --
    Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
     
    OmegaJunior, Mar 11, 2007
    #5
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. gce
    Replies:
    0
    Views:
    772
  2. Replies:
    1
    Views:
    335
  3. Samuel
    Replies:
    6
    Views:
    297
    =?ISO-8859-1?Q?G=F6ran_Andersson?=
    Mar 11, 2007
  4. richard
    Replies:
    3
    Views:
    531
    richard
    Aug 9, 2008
  5. Gianni

    IE shows false and Firefox shows true

    Gianni, Jul 10, 2009, in forum: Javascript
    Replies:
    3
    Views:
    456
    Thomas 'PointedEars' Lahn
    Jul 10, 2009
Loading...

Share This Page