I'm looking for a method that will only allow a page to be opened in an iframe and not in a main browser window. I know I can check the parent using Javascript but that is easily defeated - ideally I'm looking for a Content-Security-Policy header or similar that browsers will obey (I know they can be defeated too but I can live with that risk).
I made a button for a PDF download that is working well in Chrome but it doesn´t open in Mozilla.
This is the code I used:
<a target="_blank" href="http://gerster.com/docs/posamenten_neuheiten_2014_2.pdf">Jetzt PDF-Katalog herunterladen</a>
What could be wrong?
Note: No error is showing up.
Q Using window.open or "target=" such as blank it doesn´t open in ### Browser
What could be wrong?
It is up to each user to download or permit binary.PDF running in a browser viewport after download, this is especially true after download fron any non trusted site.
OOB many browsers assume they can sandbox the PDF download and then allow as default action review of the PDF file. Chromeium based browsers like Edge may be more inclined to use that before the user improves their security.
So the 1st task for a user should be to switch off Edge auto viewing of PDFs and switch to a more secure setting.
In that case Edge / Chrome and other browsers will NOT auto run the downloaded PDF but ask the user if they wish to View after Download or simply Download.
One of the possible values of that attribute is _blank, which tells the browser to open a new window (or tab, if that’s the user’s preference) when that link is clicked.
This used to be “invalid” in HTML
see A Bad Reason: The link is to a PDF
If you are going to do it, not only do you need the target attribute for the functionality, you need to rel attribute for security.
So do not open yourserver to security issues blacklist or pop-up blocking see https://mathiasbynens.github.io/rel-noopener/
Don’t use target=_blank (or any other target that opens a new navigation context), especially for links in user-generated content, unless you have a good reason
All
I am using http://kangoextensions.com/ to create an extension for multiple browsers.
This extension needs to add a sidebar to each webpage in each tab, that allows the user to interact with my server from the web page.
What I currently have is a content script that adds an iframe to the webpage. The iframe is initially hidden, but when the user presses a button I also added, the iframe is shown.
The iframe source is my own website.
This works great for the most part, but I have an issue - when the user is constantly navigating between pages, my iframe constantly disappears and re-appears with each navigation, which is not a great user experience.
I also tried using a browser extension popup window, but this window disappears when it loses focus, so it does not fit my use case.
I am looking for a way to have a "proper" sidebar - a window that is loaded once and lives for the entire duration of the browser tab.
If anyone knows of a way to achieve this, I would really appreciate it. Ideally - a solution that works on all browsers, but if you know of a way that will work only on some browsers, that's good too.
Thanks
Amir
Kango does not support sidebars at the moment.
The best you can manage is a popup.
We've developed an integration to our application where we wrap the Google Document Editor in an iFrame so that we can edit content in context of our application. This week we've noticed that the Share button is disabled when working with Documents and Spreadsheets wrapped in the iFrame. (The Share button appears to work as normal with Presentations.) Was there an update to the document editor that would cause the share button in the edit view to be disabled when viewed through an iFrame? Is this a bug, or was this an intentional change?
Sharing button is disabled by intention due to security reasons and will not be available for iframe embeds anymore.
What combination of html and IE8 settings get IE8 to open links in a new tab. Or can you not do this with IE8, and you only get the new tabs by manually selecting File-> new/duplicate tab?
My website works in Firefox - pages on the site load in the current tab, and links off site load a new tab. IE8 won't behave: target="_blank" opens a whole new window; the other options, _self _top _parent, all open the page in the current tab.
I have Firefox set to "Open new windows in a new tab." The links to pages on my site all have target="_self" and Firefox keeps these in the current tab. On the external links I don't have a target set (I added _blank to see if it fixed IE8, and doing that didn't affect Firefox).
I can't find an equivalent setting in IE8. Tools-Internet Options-General-Tabs/Settings has an enable tabs box, and a sub-option to automatically switch to newly opened tabs. Is there some html that will work? An IE8 setting I'm missing?
Any help appreciated.
It is not a thing you can control from HTML code, as it should be user's, not document author's decision how to open a link.
To open pop-up windows in new tab, follow instructions from IE8 help:
To change how pop-ups are displayed
In Internet Explorer, click the Tools
button, and then click Internet
Options. Click the General tab, and
then, in the Tabs section, click
Settings. Make a selection in the
When a pop-up is encountered section.
Click OK twice.
Updated:
Reading OPs comments to other posts, it seems like the intent is to make all external links open in new tabs. However, it is not document author's choice how the client should open any link in any page - it has to be decided by the client. Moreover, even though you can create a client-side script which sets "target" property to open pop-up windows, there is no notion of "tab" in Document Object Model and hence you cannot do it even in a script.
The answer to the question was posted in the comments (but is now deleted). Now you can test it in IE8 - just use the middle mouse button to open the link in a new tab. Firefox does work better with tabs.
How the browser interprets the target is browser dependent - each vendor will specify what they want. Firefox decided to use a new tab, IE decided to use a new window.
The html 4.01 spec has this to say on "_blank":
The user agent should load the designated document in a new, unnamed window.
The spec predates the wide usage tabbed browsing now has, so doesn't mention the concept anywhere.
Opening a page in a new tab is concept that believe is not covered by the html standard. The Firefox behavior is just a setting in the browser, which IE8 might or might not have.
On a related note, I personally find it abusive of websites to make the choice of opening a page in a new tab/window. What if I want it to open in the current tab/window?
Of course, in a rich application-like site that is basically entirely an application I find it convenient that pages open in a new tab/window. This makes them work more like desktop apps
For normal pages, I would suggest not setting the target at all and let the user decide.
I think W3.org is still working on this issue, but it isn't implemented in any browser yet. Also remember that Internet Explorer will be the last browser to implement it ;)
This is code copied from a W3 Working Draft:
/* If a user wanted to have new windows open in new tabs instead, she could use the following user style sheet to do so: */
* { target-new: tab ! important }
Of course, it is impossible to set user preference in HTML or Javascript -- it would be unsafe.