Comment 143 for bug 195698

Revision history for this message
In , Bzbarsky (bzbarsky) wrote :

Surfing to a site need not be user-initiated by any means. Any web page can do that by setting window.location.

Which means that backgrounds windows, or worse yet windows on different desktops can do stuff that makes the window you _are_ using right now completely unusable.

This is all if we're doing an application-modal dialog. Just blocking on the password store would of course make this less of a problem.

All that said, isn't this basically like the "mailnews prompts are no longer serial" problem that was cut for Gecko 1.9? Sure seems like basically the same issue to me.