search

mozilla / multi-account-containers

Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs that preserve your privacy. Cookies are separated by container, allowing you to use the web with multiple identities or accounts simultaneously.
https://addons.mozilla.org/firefox/addon/multi-account-containers/
Mozilla Public License 2.0
2.74k stars 343 forks source link

Popup escapes its container: launch google meet in gsuite #1444

Open onionjake opened 5 years ago

onionjake commented 5 years ago

Actual behavior

When left clicking "Join Hangouts Meet" from the calendar page it opens google meet in a new windows that is NOT in my container (I do not see the 'Work' container color or logo).

Here is the 'Join Hangouts Meet' that when left-clicked launched the popup: image

Here is the URL bar after left-clicking the popup. It is not launched in my container: image

While left-clicking causes it to popup outside of the container, middle clicking the link correctly opens hangouts meet in the 'Work' container.

Expected behavior

I expect that it would be impossible for a website to cause a link to be opened outside of its container.

Steps to reproduce

  1. Open a new container tab, e.g. "work"
  2. Log into calendar.google.com with a gsuite account
  3. Create a calendar event and Add Hangouts Meet for conferencing
  4. Single left click on the event after it is created to display the summary view (Note: it only appears to happen in the summary view as I showed a screenshot above. It does not exhibit the behavior when you go to the full page view of the calendar event).
  5. Left click on the "Join Hangouts Meet" link in the summary view.
  6. Hangouts meet will be launched in a new window that is not in the "work" container
onionjake commented 5 years ago

I just tested this on a regular google account (not gsuite) and it correctly opens the link inside a container, so I can only make this happen on google calendar with gsuite.

onionjake commented 5 years ago

The other strange thing about this is I have pop-up blocking enabled without an exception for this website. Using window.open() from the javascript console gets blocked... I'm curious why the popup (that is also outside my container) isn't blocked.