Learn how easy it is to sync an existing GitHub or Google Code repo to a SourceForge project! See Demo

Close

#4427 Security warning on popups when using IE

Other
open
nobody
None
5
2014-05-28
2014-05-28
Frank Vissing
No

The Bug: as of 1.690
You are presented with a security warning when opening any popup in IE that is produced using window.open (I am runnning 11.0.9600.17107 but this is more general than that) E.g. opening 'Disk and Network Filesystems' and using the choose directory option, but as i wrote this is an issue for all window.open popups
The technical reason for this not working.
IE. does not set HTTP_REFERER when using window.open

Discussion

  • Jamie Cameron
    Jamie Cameron
    2014-05-28

    That's a pity - it seems that IE is the only browser that has this limitation. And it is dangerous for Webmin to have scripts that can be run without referrer checking, as they are a big source of security holes (XSS).