Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Sites using CSP frame-ancestors do not seem to be detected correctly

Description

I believe there's a bug with the web content "Open in New Window" Detection with CSP. When using "https://www.cnn.com" it doesn't detect that it needs a new window.

The web console says:

http://www.cnn.com IS correctly detected.

I also think like it should be either removing the option entirely and/or telling the user why they can't leave the pages open in the same window.

Activity

Matthew Jones February 15, 2018 at 7:23 AM

This looks like the whole header it has

They don't have an x-frame-options, just this one. Might be a little harder to parse out.

Details

Priority

Affects versions

Components

Assignee

Reporter

Created February 14, 2018 at 4:10 PM
Updated February 19, 2018 at 1:53 PM