krakenjs / zoid

Cross domain components
Apache License 2.0
2.03k stars 248 forks source link

Iframe can be tricked into thinking it's a popup window #77

Closed bluepnume closed 7 years ago

bluepnume commented 7 years ago

If I create an iframe and call window.open('', 'iframename') it gets a window.opener and the frame then believes it's a popup.

This causes xcomponent to crash in weird ways.

Found a live example of google tag manager doing this kind of window.open to get a handle on a window.

bluepnume commented 7 years ago

Fixed in post-robot.