*Summary*: This feature adds a token to the window.open() feature argument to allow callers to specify that the window should be opened without a referrer (and an opener). *Bug*: https://bugzilla.mozilla.org/show_bug.cgi?id=1527287 *Link to standard*: https://github.com/whatwg/html/pull/4331 *Platform coverage*: where will this be available? All platforms. *Estimated or target release*: in which version do you want to/plan to release this? Firefox 68. *Preference behind which this will be implemented*: dom.window.open.noreferrer.enabled. *Is this feature enabled by default in sandboxed iframes?* Yes, it is. *DevTools bug*: No devtools specific support needed. *Do other browser engines implement this?*
Blink: Implemented on trunk: https://groups.google.com/a/chromium.org/d/msg/blink-dev/K8_-u7mK688/rK7FrIOLBQAJ WebKit: Implemented in the latest Safari Technology Preview: https://webkit.org/blog/8825/release-notes-for-safari-technology-preview-80/ *web-platform-tests*: https://github.com/web-platform-tests/wpt/pull/15352 *Is this feature restricted to secure contexts?* No, since window.open() itself is exposed to non-secure contexts as well. Please note that similar to our implementation of the noopener feature token for window.open(), our noreferrer implementation will diverge from the spec in that we will remove the parsed tokens from the feature string before passing it down to lower layers, see https://bugzilla.mozilla.org/show_bug.cgi?id=1419960. This is now being tracked to be merged into the spec in https://github.com/whatwg/html/pull/3297. The impact of this (currently Firefox specific) behaviour is that if you pass a feature argument containing only "noopener" (or "noreferrer") to window.open() you will get a usable window with the default UI elements only with its opener (or referrer) stripped out as opposed to a barebones window with all of the UI elements (e.g. various toolbars) missing as well. Please let me know if you have any questions or concerns. Thanks, -- Ehsan _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
