[tbb-bugs] #18168 [Tor Browser]: Iframe based AJAX call blocked by popup-blocker or opening in new tab

[Tor Bug Tracker & Wiki]

#18168: Iframe based AJAX call blocked by popup-blocker or opening in new tab
-----------------------------+-----------------------------------
     Reporter:  sky_kohai    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  Medium       |  Milestone:
    Component:  Tor Browser  |    Version:
     Severity:  Normal       |   Keywords:  tbb-usability-website
Actual Points:               |  Parent ID:
       Points:               |    Sponsor:
-----------------------------+-----------------------------------
 Iframe based AJAX call blocked by popup-blocker. After allowing popups,
 form submits to new tab instead of hidden iframe.

 Issue appeared in TBB 5.5. TBB 5.0.7 (previous stable) works with same
 code normally.

 To reproduce go to http://dmirrgetyojz735v.onion/d/#set-lang:en and try to
 make post with JS support enabled.
 Code of submit and AJAX handlers can be found in
 http://dmirrgetyojz735v.onion/js/tinaib1.js , seek doPostForm func.

 Trace is like
 {{{

 WARNING: content window passed to PrivateBrowsingUtils.isWindowPrivate.
 Use isContentWindowPrivate instead (but only for frame scripts).
 pbu_isWindowPrivate at resource://gre/modules/PrivateBrowsingUtils.jsm:25:14
 nsBrowserAccess.prototype.openURI at chrome://browser/content/browser.js:15194:21

 }}}

 Depending of the exact code, call stack may contain func, which actually
 submitted form.

 Tested on Ubuntu 14.04 x64.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18168>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online