ROCKETTHEME IS CLOSING ON JUNE 30, 2025. As a thank-you to our community, enjoy 50% off all themes with the promo code THANKYOU before we shut down.
Read our Farewell Blog Post for more details.
Google Chrome does not block pop-ups, only hides them!
Posted 14 years 1 month ago
First of all I apologize for my bad English. No browser executes the code in blocked pop-ups, except Google Chrome. :shock:
I reported this to the developers (
http://code.google.com/p/chromium/issues/detail?id=79743
), but they told me that for them it is not a safety issue, because "(...) Any attack that could be delivered through the hidden popup could be delivered just as easily through the originating page. (...)".
I believe this is partly true, but I remain convinced that a pop-up that was opened in a hidden way, it can offer more opportunity to those who have bad intentions.
In addition, a pop-up is often used to display advertising that may include code to detect personal information that many people would not provide. So it's very useful that the code inside of the pop-up should never be executed.
Unfortunately, this is precisely what makes Chrome, in a subtle way, through an invisible window.
So, even if it was not a safety issue (and I am not at all convinced about this), could be a problem regarding privacy.
But in any case, I bet that someone might have already thought about how to "exploit" this "special" behavior of Chrome.