你即將離開本站

並前往https://github.com/electron/electron/issues/5151

window.open allows a malicious script to read arbitrary local ...

When allowpopups is enabled, injected script can load file scheme because electron override windowopen and don't check origin.

確定！ 回上一頁

查詢 「Window open file」的人也找了：

  1. Window open file
    2.
  2. Window open download file
    3.
  3. window.open _blank
    4.
  4. jQuery window open
    5.
  5. window.open parameter
    6.
  6. window.open title
    7.
  7. Window open _self
    8.
  8. Window open new window (not tab)
    9.