Pregunta

I want to hide the new popup window's address bar. I gooogled a lot and all of the results were this.

This is no longer possible in modern browsers due to security restrictions.

Official(-ish) Sources:

Firefox

In Firefox 3, dom.disable_window_open_feature.location now defaults to true, forcing the presence of the Location Bar much like in IE7. See bug 337344 for more information.

Internet Explorer 7 and later

In Internet Explorer 6, location specifies whether to display the Address Bar.

(Implying the behaviour ends with IE6)

Chrome/Chromium

Those toolbar hiding parameters are ignored in Chrome. You will also notice that modern browsers are moving towards not hiding it as security / anti phishing measures. Also see https://bugzilla.mozilla.org/show_bug.cgi?id=337344

Which means window.open's location option no longer works.

Is it really impossible to hide the address bar? Any good solution? Our project really need to hide the address bar. The request parameter is sending session id, and my boss wants to hide it. It is calling the Get RESTAPI, so hiding the parameter with POST is not a choice.

Any good idea?

¿Fue útil?

Solución

You pretty much answered yourself, that it's impossible for security reasons. But you can still use iframes and ajax.

Just imagine a scenario, when popup with a fake address bar opens, you visit some site with a fake internet transaction dialogue box and somebody steals your real money. Weird, but 7 years ago it was possible.

Licenciado bajo: CC-BY-SA con atribución
No afiliado a StackOverflow
scroll top