Saturday, December 22, 2012

window.open()


// The maximum number of popups that can be spawned from one page.
static const int kMaximumNumberOfUnacknowledgedPopups = 25;
The above is an extract from chrome source code, which says and intentional upper bound of 25 on window.open calls. See Chromium bugs 2632 and 3382for background, but in brief, the idea is to prevent denial-of-service (both UI-wise and memory-wise) attacks from pages that open popups indefinitely.
Extension APIs like chrome.tabs.create are not subject to these APIs, since extensions are privileged access already.
Window.open("\n"); opens a duplicate popup window.
window.open("\r"); opens a duplicate popup window.

No comments: