Comment 20 for bug 1036726

Valmar: this is something that we are working on, the issue is that we try to make sure that the webapp in itself is contained (cannot browser to e.g. facebook when in the calendar webapp). This is done (lacking a better mechanism) at the url filtering level and based on accepted patterns for url browser within a given webapp. This works for most web applications, but google is a special player in that it uses a centralized auth mechanism that makes it hard to determine exactly what the containment pattern should be.

We are working on a better solution.

One way to mitigate the issue is to expand the list of allowed urls in the manifest.json files for each webapp (e.g. for gmail in /usr/share/unity-webapps/userscripts/unity-webapps-gmail) add:

"https://accounts.google.*/*", "https://www.google.com/a/*"

to the list urls found in the "includes" property.