Live data from Hacker News

Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

news.ycombinator.com

31–40 of 84 posts

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#31

Pages rely on window.open() for all sorts of non-popup things. You can't just break window.open(), or sites like DDG will stop working. Not that there aren't ways to fix this, but in general "remove the offending API" rarely works on the Web. You need a more subtle approach.

It'd be cool if window.open() just took some screen real-estate from the calling page, tho, instead of letting some content escape the shackles of its tab.

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#32
I sometimes wonder how nice life would be if we had two modes in browsers:

Mode 1: Render static content; allow unobtrusive JavaScript operations (perhaps capped by total operations or CPU usage).

Mode 2: Run unlimited JS operations, allow alert() and window.onbeforeunload events handers.

The second mode could be called "Application Mode" and could be turned on selectively per site.

This would allow you to give gmail.com whatever resources it needed. But clickbait-headline-slideshows.com could not, unless you explicitly allowed it.

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#33

I sometimes wonder how nice life would be if we had two modes in browsers: Mode 1: Render static content; allow unobtrusive JavaScript operations (perhaps capped by total operations or CPU usage). Mode 2: Run unlimited JS operations, allow alert() and window.onbeforeunload events handers. The second mode could be called "Application Mode" and could be turned on selectively per site. This would allow you to give gmail…

I just keep Javascript turned off except for sites I whitelist. Nobody ever believes how easy and unobtrusive this is, despite browsing a pretty huge and diverse set of domains.

This has gotten a little more difficult since chrome changed the UI around these settings though.

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#34

Pages rely on window.open() for all sorts of non-popup things. You can't just break window.open(), or sites like DDG will stop working. Not that there aren't ways to fix this, but in general "remove the offending API" rarely works on the Web. You need a more subtle approach.

It'd be cool if window.open() just took some screen real-estate from the calling page, tho, instead of letting some content escape the shackles of its tab.

Not on my multi-monitor machine. No I wouldn't. I want a separate window so I can move it to a separate monitor

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#35

Earlier quoted context omitted.

It'd be cool if window.open() just took some screen real-estate from the calling page, tho, instead of letting some content escape the shackles of its tab.

Not on my multi-monitor machine. No I wouldn't. I want a separate window so I can move it to a separate monitor

Could be draggable to a window like tabs are. But adding another layer of nesting (window->tab->this thing) could be quite confusing

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#36

I sometimes wonder how nice life would be if we had two modes in browsers: Mode 1: Render static content; allow unobtrusive JavaScript operations (perhaps capped by total operations or CPU usage). Mode 2: Run unlimited JS operations, allow alert() and window.onbeforeunload events handers. The second mode could be called "Application Mode" and could be turned on selectively per site. This would allow you to give gmail…

[deleted]

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#38

> There are also sites that will kill your page history by going through a bunch of redirects to prevent you from leaving with the back button. It's 2016 and Microsoft is incapable of creating a reliable cross-site login system. Instead, we still have the disastrous mess that is live.com. Minimum 2 redirects - at least 1 of which is Javascript (seriously?) - to handle a simple login. And when your cookies go a bit wo…

Meanwhile, Google authentication -- which begins at accounts.google.com -- often bounces through appengine.google.com, accounts.youtube.com, and other domains. Making apps for schools, it can be a bit dodgy explaining that the school needs to whitelist a YouTube url in order to use Google SSO.

Re: Ask HN: Why do browsers still support pop up dialogs and other bad behavior?

#39
post #21

> There are also sites that will kill your page history by going through a bunch of redirects to prevent you from leaving with the back button. It's 2016 and Microsoft is incapable of creating a reliable cross-site login system. Instead, we still have the disastrous mess that is live.com. Minimum 2 redirects - at least 1 of which is Javascript (seriously?) - to handle a simple login. And when your cookies go a bit wo…

2 redirect? A dozen at least. And one website for the login, another for the password. Why do simple when one can write a piece of shit!

In their defense based on your login it can push you to a different IDP to authenticate. In practice it's bad form to MiTM passwords for other systems, hence the password and login on different pages.
Post reply on HN