0
Welcome Guest! Login
0 items Join Now

ROCKETTHEME IS CLOSING ON JUNE 30, 2025. As a thank-you to our community, enjoy 50% off all themes with the promo code THANKYOU before we shut down. Read our Farewell Blog Post for more details.

Google Chrome does not block pop-ups, only hides them!

  • Google Chrome does not block pop-ups, only hides them!

    Posted 14 years 1 month ago
    • First of all I apologize for my bad English.
      No browser executes the code in blocked pop-ups, except Google Chrome. :shock:

      I reported this to the developers ( http://code.google.com/p/chromium/issues/detail?id=79743 ), but they told me that for them it is not a safety issue, because "(...) Any attack that could be delivered through the hidden popup could be delivered just as easily through the originating page. (...)".
      I believe this is partly true, but I remain convinced that a pop-up that was opened in a hidden way, it can offer more opportunity to those who have bad intentions.

      In addition, a pop-up is often used to display advertising that may include code to detect personal information that many people would not provide. So it's very useful that the code inside of the pop-up should never be executed.
      Unfortunately, this is precisely what makes Chrome, in a subtle way, through an invisible window.
      So, even if it was not a safety issue (and I am not at all convinced about this), could be a problem regarding privacy.
      But in any case, I bet that someone might have already thought about how to "exploit" this "special" behavior of Chrome.

      As you will read in the official thread ( http://code.google.com/p/chromium/issues/detail?id=79743 ), the developers do not agree my point of view.
      I also suggest you read this comment: http://code.google.com/p/chromium/issues/detail?id=38458#c4
    • Paolo Coveri

Time to create page: 0.059 seconds