473,327 Members | 1,920 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,327 software developers and data experts.

IE7 shows location even if location=no


I'm doing a popup window.

In my parameters I set location=no

In FF20 and IE6 the location entry does not show.

In IE7 it shows.

Are there new parameters for displaying a popup window in IE7?

--
The Texeme Construct

Jan 19 '07 #1
7 3388
No new ones but some of the old ones wont work anymore. It's because
it is used to trick people into believing they are on another domain
than they really are.

Regards Jens Peter Karlsen. Microsoft MVP - Frontpage.

On Thu, 18 Jan 2007 20:23:24 -0800, John Bailo <ja*****@texeme.com>
wrote:
>
I'm doing a popup window.

In my parameters I set location=no

In FF20 and IE6 the location entry does not show.

In IE7 it shows.

Are there new parameters for displaying a popup window in IE7?
Jan 19 '07 #2
John Bailo wrote :
>
I'm doing a popup window.

In my parameters I set location=no

In FF20 and IE6 the location entry does not show.

In IE7 it shows.

Are there new parameters for displaying a popup window in IE7?

MSIE 7 forces the presence of the Address Bar by default: "We think the
address bar is also important for users to see in pop-up windows. A
missing address bar creates a chance for a fraudster to forge an address
of their own. To help thwart that, IE7 will show the address bar on all
internet windows to help users see where they are." coming from
Microsoft Internet Explorer Blog, Better Website Identification
http://blogs.msdn.com/ie/archive/2005/11/21.aspx

Mozilla.org also intends to soon force the presence of the Location Bar
in Firefox 2:
Bug 337344: Change default dom.disable_window_open_feature.location to true
https://bugzilla.mozilla.org/show_bug.cgi?id=337344

Any Mozilla-based browsers (Firefox 1.x, Seamonkey, NS 7.x, K-meleon
1.x, etc) can force the presence of location bar with the user setting
the dom.disable_window_open_feature.location property value to true

Gérard
--
remove blah to email me
Jan 19 '07 #3
ASM
Gérard Talbot a écrit :
>
MSIE 7 forces the presence of the Address Bar by default: "We think the
address bar is also important for users to see in pop-up windows. A
missing address bar creates a chance for a fraudster to forge an address
of their own.
And what that change ? seeing this frauster's address or not ...
To help thwart that, IE7 will show the address bar on all
internet windows to help users see where they are."
Bof !
http://blogs.msdn.com/ie/archive/2005/11/21.aspx

Mozilla.org also intends to soon force the presence of the Location Bar
in Firefox 2:
No ? Arggghhh !
We already have the status bar :-(

Is it to force Ajax development and use ?
Bug 337344: Change default dom.disable_window_open_feature.location to true
https://bugzilla.mozilla.org/show_bug.cgi?id=337344

Any Mozilla-based browsers (Firefox 1.x, Seamonkey, NS 7.x, K-meleon
1.x, etc) can force the presence of location bar with the user setting
the dom.disable_window_open_feature.location property value to true
Who knows and is able to do that ?
Not me.
With FF 2.0.0.1 I haven't address bar if not asked in window.open()
here :
http://stephane.moriaux.perso.wanado...uc/tutticanti/
the link 'test' open a so popup (if allowed of course).

--
Stephane Moriaux et son (moins) vieux Mac déjà dépassé
Stephane Moriaux and his (less) old Mac already out of date
Jan 19 '07 #4
ASM <st*********************@wanadoo.fr.invalidwrote :
Gérard Talbot a écrit :
>>
MSIE 7 forces the presence of the Address Bar by default: "We think
the address bar is also important for users to see in pop-up windows.
A missing address bar creates a chance for a fraudster to forge an
address of their own.

And what that change ? seeing this frauster's address or not ...
Read what was written. A missing address bar lets the fraudster create a
window which looks like it has an address bar showing the correct url for
your bank, when in fact the 'address bar' is part of the page content.

Jan 19 '07 #5
Gérard Talbot wrote:
MSIE 7 forces the presence of the Address Bar by default: "We think the
address bar is also important for users to see in pop-up windows. A
missing address bar creates a chance for a fraudster to forge an address
of their own.
In my case, the parent and the popup are both from the same webserver,
but the parent uses https and the popup doesn't!

(It's a dojo application, and I thought using http instead of https
would save downloading!)
Mozilla.org also intends to soon force the presence of the Location Bar
in Firefox 2:
What a drag!

--
The Texeme Construct

Jan 19 '07 #6
In my case, the parent and the popup are both from the same webserver,
but the parent uses https and the popup doesn't!

(It's a dojo application, and I thought using http instead of https
would save downloading!)

So are you saying if they are both using https, then the location bar
goes away?

I've noticed if I use a localhost http server, then there are no
location bars in popups, but if I use a remote server somewhere on my
domain, then the location bars appear. This tells me there are some
situations where IE7 does not see a need for location bar display
forcing and I just wonder what all those types of configurations are.

For example, why force display of the location bar if both URLs are
from the same domain? (opener window, popup window) This seems
absolutely pointless to me. If it's anti-phishing, then it should
force display when the domains or the servers do not match.

For another example, XmlHttp does not allow comm between two different
servers on the same domain, as a security precaution (over zealous in
my mind, why not just limit the same as the browser, to one domain?).

This seems like a situation where the user might want to know that two
different servers are being used to feed the parent and the popup, and
therefor the location bar is displayed. But not if they both are
served from the same http server machine and port, then why bother?

jeff papineau
surfyogiATgmailDOTcom

Mar 9 '07 #7
On Fri, 09 Mar 2007 01:23:50 +0100, Jeff <su******@gmail.comwrote:
>
>In my case, the parent and the popup are both from the same webserver,
but the parent uses https and the popup doesn't!

(It's a dojo application, and I thought using http instead of https
would save downloading!)


So are you saying if they are both using https, then the location bar
goes away?

I've noticed if I use a localhost http server, then there are no
location bars in popups, but if I use a remote server somewhere on my
domain, then the location bars appear. This tells me there are some
situations where IE7 does not see a need for location bar display
forcing and I just wonder what all those types of configurations are.

For example, why force display of the location bar if both URLs are
from the same domain? (opener window, popup window) This seems
absolutely pointless to me. If it's anti-phishing, then it should
force display when the domains or the servers do not match.

For another example, XmlHttp does not allow comm between two different
servers on the same domain, as a security precaution (over zealous in
my mind, why not just limit the same as the browser, to one domain?).

This seems like a situation where the user might want to know that two
different servers are being used to feed the parent and the popup, and
therefor the location bar is displayed. But not if they both are
served from the same http server machine and port, then why bother?

jeff papineau
surfyogiATgmailDOTcom
On that note, why would you assume the audacity to change the user's
computer at all? The browser is the user's property, not the author's. The
fact that IE7 allows an author to remove the address bar at all is pure
arrogance. Keep your hands off of my browser! Your domain is the contents
of the window, not the window itself. That's mine.

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
Mar 11 '07 #8

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

8
by: Chris Lasher | last post by:
Hello, I really like the finditer() method of the re module. I'm having difficulty at the moment, however, because finditer() still creates a callable-iterator oject, even when no match is found....
26
by: Nige | last post by:
I'm a complete novice to JS. I want to insert the date and time into a document in the format: WB-MMDDHHmm Where: WB- is a fixed string prefix (the whole string is a reference number) MM...
3
by: mscertified | last post by:
I've just started playing around with VS.NET and am working thru a book. I down loaded all the code from the book. I created a virtual folder and pointed to chapter 1 which has a simple aspx page...
0
by: RJN | last post by:
Hi I have to read an xml and add the node elements into a hashtable with nodename as key and nodetext as value. If the selected node has childnodes, then value should go as an array. for eg.,...
4
by: LF | last post by:
Hello, I have a database with a table of projects and a table of tasks (each project can have multiple tasks). I have a report that has a group header for the project name, etc., and then the...
0
donilourdu
by: donilourdu | last post by:
hi the follwing procedure shows run time error : DELIMITER $$ DROP PROCEDURE IF EXISTS `rec_detail`.`sp2` $$ CREATE DEFINER=`root`@`localhost` PROCEDURE `sp2`(x varchar(22)) BEGIN ...
1
by: =?Utf-8?B?RG9uIFc=?= | last post by:
The application is hidden and at times it must show a form that should appear at the top of all other windows and its text box should have the focus no matter where the focus was prior to the...
0
by: jimgym1989 | last post by:
Hi there, I have 2 PHP files, memeber.php & view.php This is my member.php while($row = mysql_fetch_array($strSQL)){ $data .= "<tr>"; $data .= "<td>"; $data .= "<input type='checkbox'...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.