popups IE7

[Perecli Manole]

In IE7, popup windows opened with Window.Open() behave differently than IE6
in that you can't get rid of the address bar or status bar even when
specified so in the Open() options. I was told by a few other developers
that this is a security measure and it is no longer possible to hide the
address bar. If this is true, I was wondering if anyone can explain how
Microsoft achieves just this in their Outlook for Web application. When
creating a new email, a popup appears with no address bar, no status bar,
and it is not modal. How do they do this even in IE7?

Thanks
Perry

 

[Guest]

In IE7, popup windows opened with Window.Open() behave differently than IE6
in that you can't get rid of the address bar or status bar even when
specified so in the Open() options. I was told by a few other developers
that this is a security measure and it is no longer possible to hide the
address bar. If this is true, I was wondering if anyone can explain how
Microsoft achieves just this in their Outlook for Web application. When
creating a new email, a popup appears with no address bar, no status bar,
and it is not modal. How do they do this even in IE7?

Thanks
Perry

This code is working well in IE7 and does no address or status bar

<a href="#"
onclick='window.open("/","windowName","toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=1,resizable=1,width=500,height=500");'>
popup
</a>

 

[Kevin Spencer]

It's no secret. View the HTML and JavaScript source code.

--
HTH,

Kevin Spencer
Microsoft MVP

Printing Components, Email Components,
FTP Client Classes, Enhanced Data Controls, much more.
DSI PrintManager, Miradyne Component Libraries:
http://www.miradyne.net

 

[Perecli Manole]

I did that and I don't understand what they are doing. They are not using
the window.open() approach.
From the opener page, they have an <a> link that looks like this: <a
href='http://mail/exchange/perry/Drafts/?Cmd=new'></a> and when the popup
opens the context menu has been disabled so that you can't peek at the
source code.

Perry

 

[Guest]

I did that and I don't understand what they are doing. They are not using
the window.open() approach.
From the opener page, they have an <a> link that looks like this: <a
href='http://mail/exchange/perry/Drafts/?Cmd=new'></a> and when the popup
opens the context menu has been disabled so that you can't peek at the
source code.

Perry, they are using the same window.open as I sent you.

 

[Perecli Manole]

This does not work for the Internet zone. It does work for the Intranet zone
though.

Perry

 

[Guest]

This does not work for the Internet zone. It does work for the Intranet zone
though.

Ah, you're right! But this is related to security settings

Open Tools - Internet Options - Security - Internet - Custom Level

Find Miscellaneous, Allow websites to open windows without address or
status bars

You have it disabled by default

 

[Perecli Manole]

Hmm.. that is interesting to know for my own browser, but I need to enforce
this for all my users. I can't change their browser settings remotely. This
is for a corporate Intranet for internal use only so my users should have no
security concerns going to this site. But since our Intranet is exposed to
the Internet, so users can work from home, this site falls into the Internet
zone even though it is Intranet. I guess there is no way to get the IE6
behavior.

Thanks for the tips
Perry

 

[Guest]

Hmm.. that is interesting to know for my own browser, but I need to enforce
this for all my users. I can't change their browser settings remotely. This
is for a corporate Intranet for internal use only so my users should have no
security concerns going to this site. But since our Intranet is exposed to
the Internet, so users can work from home, this site falls into the Internet
zone even though it is Intranet. I guess there is no way to get the IE6
behavior.

It seems that it's done for security reasons, and the address bar is
showing when the site is not in the trusted list, or security level is
medium or above. Because you need it for your corporate users, you
might add your site to the Trusted Sites list.

 

[Guest]

It seems that it's done for security reasons, and the address bar is
showing when the site is not in the trusted list, or security level is
medium or above. Because you need it for your corporate users, you
might add your site to the Trusted Sites list.

I mean it can be done by your system administrator for all users