FSN#37542 tabnabbing is prevented and situation is either as before of safer.

svn path=/Website/trunk/; revision=34685

APPL/BES/bes_bestelling.js

@@ -52,7 +52,9 @@ var bes_supAddress = "";
 
 function navigateToSupplier()
 {
-  FcltMgr.windowopen(bes_supAddress, 'Supplier','');
+  FcltMgr.windowopen(bes_supAddress);
+  // Unsafe:
+  // FcltMgr.windowopen(bes_supAddress, 'Supplier','');
 }
 
 function onChangeArtikelgroep()

APPL/BES/sel_items_tab.js

@@ -213,9 +213,11 @@ function AddItem(bes_item_info, aantal, urole, doCheckAmount)
 
 function openArtDetails(detailurl)
 {
-    FcltMgr.windowopen(detailurl, 'ArtDetInfo',
-       "width=800, height=600, directories=no,location=no,menubar=no,title='ArtDetInfo',"
-       + "resizable=yes,status=no,titlebar=yes,toolbar=no,scrollbars=yes");
+    FcltMgr.windowopen(detailurl);
+    // Unsafe:
+    // FcltMgr.windowopen(detailurl, 'ArtDetInfo',
+    //    "width=800, height=600, directories=no,location=no,menubar=no,title='ArtDetInfo',"
+    //    + "resizable=yes,status=no,titlebar=yes,toolbar=no,scrollbars=yes");
 }
 
 // Verwerk het resultaat van fetchArtikelInfo

APPL/Localscripts/FcltMgr.js

@@ -1255,18 +1255,17 @@ var FcltMgr =
         windowopen: function(url, name, specs, replace)
         {
             var wnd;
-            /**********************************************************
-             * if the specs paramater is passed into window.open      *
-             * it opens a new window in chrome (instead of a new tab) *
-             **********************************************************/
-            if (typeof(specs) == "undefined")
-                wnd       = window.open("", name);
-            else
-                wnd       = window.open("", name, specs, replace);
-            wnd.opener    = null;
-            wnd.location  = url;
+            if (typeof name == "undefined")
+            {
+                wnd = window.open();
+                wnd.opener    = null;
+                wnd.location  = url;
+            }
+            else // still unsafe (so use only for internal URL's)
+                wnd = window.open(url, name, specs, replace);
+
             try {
-                wnd.focus;
+                wnd.focus();
             }
             catch(e) {
                 // FcltMgr.alert(e);

APPL/Shared/kenmerk_js.asp

@@ -178,7 +178,9 @@ function openDoc(filepath)
       FcltMgr.windowopen("../SLNKDwf/ShowDWF.asp?relfile=" + filepath,'facDoc',"");
     else
 <%} %>
-      FcltMgr.windowopen(filepath, 'facDoc', "");
+      FcltMgr.windowopen(filepath);
+      // Unsafe:
+      // FcltMgr.windowopen(filepath, 'facDoc', "");
 }
 
 //Data komt terug van de closeModal