The popup window needs an address bar
Not sure of an easy website to point you to for this, but I can reproduce this via a couple of local HTML files. The technique works fine on the web though.
Just pop both index.html and target-popup.html in the same folder, then open index.html in Orion.
Firefox blocks this popup by default:
Likewise, Safari blocks this too. I think this might be due to the way they are triggering the popup, so there might be 2 bugs here - one being that Orion doesn't match how Safari handles/rejects pop-ups, and the other being that there's no way to see what page a (legitimately triggered) pop-up is on - most browsers have a non-editable URL bar that lets you see the site you're on.
That's what Firefox does - you can't edit this URL bar, but you can at least see the full URL you're at.
Vlad Aha oops, I think there's 3 issues here then!
You can reproduce them all from the HTML demo I gave above.
(From the OP) - after toggling focus mode on and off, it makes the UI different to normal - more like "Safari" with a large text title on the upper left of the window. I think this is because on disabling Focus mode, the window chrome is restored to default, without checking if the current window is meant to be a "no URL bar and toolbar" window.
Security issue - you shouldn't allow a popup window with no URL bar visible, as this is a phisher's paradise for popping up fake MS 365 login prompts and asking for credential re-entry (!)
Semi security issue - Orion seems to be more permissive of pop-ups than Safari or Firefox. Likely should be blocked by default via this method.
Im i wrong if i remember safari or other browsers use to have a small butoon in the right corner to expand tool bar to show adress bar on pop ups?
made a mockup of how i remember it:
if i remember correctly the button would only be there when collapsed, and then dissapear after expanding
Yeah after googling it a bit. it was a general Mac Os thing to colapse tool bar into a narow bar
pretty sure Safari had it aswell when adress bar was hidden in pop ups
Impossible to find earlier Safari versions, so i tried earlier browser and found both Shiira and Camino with it.
cant find them colapsed tho
- Edited
A website should not be able top dictate which browser UI elements are available for me to use. It should not be able to hide my bookmarks / extensions / anything. I configured my browser to have the features I want to use - those features should be there no matter what page I am on.
Steps to reproduce:
- Navigate to: https://boards.greenhouse.io/clearcover/jobs/6358520002?t=0eadce002us#app
- Click "Apply with LinkedIn button"
- Be unable to use my password manager to login because my installed extensions are not available in the popup window
Expected behavior:
I expect the popup window to contain all the UI/Chrome elements that I have configured to be present in my browser window.
- Address bar
- Extensions
- Bookmarks
- Sidebar
- ...
Actual behavior:
- No address bar
- No Bookmarks
- No extensions
- Unable to open sidebar
Orion, OS version; hardware type:
Version 0.99.120.1-beta (WebKit 614.1.20)
MacBook Pro (macOS Monterey 12.6 build 21G115)
Image/Video:
This behavior exists in just about every browser out there, is there one you're aware of where this isn't the case?
What password manager extension do you use? I use Bitwarden, and if you right-click in one of the fields on the login form, you can access the Bitwarden menu and use auto-fill.
I realize this is common in most browsers. I think it is a bug. A website should have no say in anything outside the content window. This is a security / privacy issue - I cannot see the URL to verify I am submitting information to the site I am expecting. This is an accessibility issue - I have bookmarklets and extensions that I use to modify styles to make sites more readable to me. This is a common sense issue - it is my browser and a website shouldn't be able to dictate what I can and cannot do.
At the very least, I should have an option to allow / disallow this behavior.
One browser I used to use (way back in the day) was K-Meleon which allowed the user to configure this behavior. Firefox used to allow the user to configure this behavior. IE & Chrome used to always display at least a read-only address bar as phishing protection.
I use Bitwarden as well - thank you for the reminder about the context menu feature.
This is simply what a "popup" window always behaves like, across major browsers. I believe you are asking for the ability to prevent popup windows from not having certain UI features.
I do understand why you would want popup windows to have a URL. Make a separate post for that.
yep, that makes a lot of sense. you should make separate posts for each of those. (or use this post for one of them)