Hey. I’ve started hacking on Electrolysis bugs. I’m normally a front-end engineer working on Firefox desktop, but I’ve been temporarily loaned out to help get Electrolysis ready to be enabled by default on Nightly.<\/p>\n
I’m working on bug 989501<\/a>. Basically, when you click on a link that targets “_blank” or uses window.open, we open a new tab instead. That’s no good – assuming the user’s profile is set to allow it<\/a>, we should open the link in a new window.<\/p>\n In order to fix this, I need a clearer picture on what happens in the Firefox platform when we click on one of these links.<\/p>\n This isn’t really a tutorial – I’m not going to go out of my way to explain much here. Think of this more as a public posting of my notes during my exploration.<\/p>\n So, here goes.<\/p>\n (Note that the code in this post was current as of revision 400a31da59a9 of mozilla-central, so if you’re reading this in the future, it’s possible that some stuff has greatly changed).<\/p>\n I know for a fact that once the link is clicked, we eventually call mozilla::dom::TabChild::ProvideWindow. I know this because of conversations I’ve had with smaug, billm and jdm in and out of Bugzilla, IRC, and meatspace.<\/p>\n Because I know this, I can hook up gdb to see how I get to that call. I have some notes here<\/a> on how to hook up gdb to the content process of an e10s window.<\/p>\n Once that’s hooked up, I set a breakpoint on mozilla::dom::TabChild::ProvideWindow, and click on a link somewhere with target=”_blank”.<\/p>\n I hit my breakpoint, and I get a backtrace. Ready for it? Here we go:<\/p>\n Oh my. Well, the good news is, we can chop off a good chunk of the lower half because that’s all message \/ event loop stuff. That’s going to be in every single backtrace ever, pretty much, so I can just ignore it. Here’s the more important stuff:<\/p>\n That’s a bit more manageable.<\/p>\n So we start inside something called a docshell. I’ve heard that term bandied about a lot, and I can’t say I’ve ever been too sure what it means, or what a docshell does, or why I should care.<\/p>\n I found some<\/a> documents<\/a> that make things a little bit clearer.<\/p>\n Basically, my understanding is that a docshell is the thing that connects incoming stuff from some URI (this could be web content, or it might be a XUL document that’s loading the browser UI…), and connects it to the things that make stuff show up on your screen.<\/p>\n So, pretty important.<\/p>\n It seems to be a place where some utility methods and functions go as well, so it’s kind of this abstract thing that seems to have multiple purposes.<\/p>\n But the most important thing for the purposes of this post is this: every time you load a document, you have a docshell taking care of it. All of these docshells are structured in a tree which is rooted with a docshell owner. This will come into play later.<\/p>\n So one thing that a docshell does, is that it notices when a link was clicked inside of its content. That’s nsDocShell.cpp’d OnLinkClickEvent::Run, and that eventually makes its way over to nsDocShell::OnLinkClickSync.<\/p>\n After some initial checks and balances to ensure that this thing really is a link we want to travel to, we get sent off to nsDocShell::InternalLoad.<\/p>\n Inside there, there’s some more checking\u2026 there’s a policy check to make sure we’re allowed to open a link. Lots of security going on. Eventually I see this:<\/p>\n That’s good. aWindowTarget maps to the target=”_blank” attribute in the anchor. So we’ll be entering this block.<\/p>\n So now we’re looking for the right docshell to load this new document in. That makes sense – if you have a link where target=”foo”, subsequent links from the same origin targeted at “foo” will open in the same window or tab or what have you. So we’re checking to see if we’ve opened something with the name inside aWindowTarget already.<\/p>\n So now we’re in nsDocShell::FindItemWithName, and I see this:<\/p>\n Ah hah, so target=”_blank”, as we already knew, is special-cased – and this is where it happens. There’s no existing docshell for _blank because we know we’re going to be opening a new window (or tab if the user has preffed it that way). So we don’t return a pre-existing docshell.<\/p>\n So we’re back in nsDocShell::InternalLoad.<\/p>\n Ok, so now targetItem is nullptr, targetDocShell is also nullptr, and so isNewDocShell is true.<\/p>\n There seems to be more policy checking going on in InternalLoad after this… but eventually, I see this:<\/p>\n So we check again to see if we’re targeted at something, and check if we’ve found a target docshell for it. We hadn’t, so we do some security checks, and then … what the hell is nsPIDOMWindow? I’m used to things being called nsIBlahBlah, but now nsPIBlahBlah… what does the P mean?<\/p>\n It took some asking around, but I eventually found out that the P is supposed to be for Private – as in, this is a private XPIDL interface, and non-core embedders should stay away from it.<\/p>\n Ok, and we also see do_GetInterface. This is not the same<\/em> as QueryInterface<\/a>, believe it or not. The difference is subtle, but basically it’s this: QueryInterface says “you implement X, but I think you also implement Y. If you do, please return a pointer to yourself that makes you seem like a Y.” GetInterface is different – GetInterface says “I know you know about something that implements Y. It might be you, or more likely, it’s something you’re holding a reference to. Can I get a reference to that please?”. And if successful, it returns it. Here’s more documentation about GetInterface.<\/a><\/p>\n It’s a subtle but important difference.<\/p>\n So this docshell knows about a window, and we’ve now got a handle on that window using the private interface nsPIDOMWindow. Neat.<\/p>\n So eventually, we call OpenNoNavigate on that nsPIDOMWindow. That method is pretty much like nsIDOMWindow::Open, except that OpenNoNavigate doesn’t send the window anywhere – it just returns it so that the caller can send it to a URI.<\/p>\n Through the magic of do_GetInterface, nsDocShell::GetInterface, EnsureScriptEnvironment, and NS_NewScriptGlobalObject, I know that the nsPIDOMWindow is being implemented by nsGlobalWindow, and that’s where I should go to to find the OpenNoNavigate implementation.<\/p>\n So off we go!<\/p>\n nsGlobalWindow::OpenNoNavigate just seems to forward the call, after some argument setting, to nsGlobalWindow::OpenInternal, like this:<\/p>\n Having a glance around at the rest of the nsGlobalWindow::Open[foo] methods, it looks like they all call into OpenInternal. It’s the big-mamma opening method.<\/p>\n This method does a few things, including making sure that we’re not being abused by web content that’s trying to spam the user with popups.<\/p>\n Eventually, we get to this:<\/p>\n and return the domReturn pointer back after a few more checks to our caller. Remember that the caller is going to take this new window, and navigate it to some URI.<\/p>\n Ok, so, pwwatch. What is that? Well, that appears to be a private interface to nsWindowWatcher, which gives us access to the OpenWindow2 method.<\/p>\n After prepping some arguments, much like nsGlobalWindow::OpenNoNavigate did, we forward the call over to nsWindowWatcher::OpenWindowInternal.<\/p>\n And now we’re almost done – we’re almost at the point where we’re actually going to open a window!<\/p>\n Some key things need to happen though. First, we do this:<\/p>\n So what that does is it tries to get the docshell owner of the docshell that’s attempting to open the window (and that’d be the docshell that we clicked the link in).<\/p>\n After a few more things, we check to see if there’s an existing window with that target name which we can re-use:<\/p>\n And if so, we set it to newDocShellItem.<\/p>\n After some more security stuff, we check to see if newDocShellItem exists. Because name is nullptr (since we had target=”_blank”, and nsDocShell::FindItemWithName returned nullptr), newDocShellItem is null.<\/p>\n Because it doesn’t exist, we know we’re opening a brand new window!<\/p>\n More security things seem to happen, and then we get to the part that I’m starting to focus on:<\/p>\n We ask the parentTreeOwner to get us something that it knows about that implements nsIWindowProvider. In the Electrolysis \/ content process case, that’d be TabChild. In the normal, non-Electrolysis case, that’s nsContentTreeOwner.<\/p>\n The nsIWindowProvider is the thing that we’ll use to get a new window from! So we call ProvideWindow on it, to give us a pointer to new nsIDOMWindow window, assigned to newWindow.<\/p>\n Here’s TabChild::ProvideWindow:<\/p>\n The docshell->GetIsInBrowserOrApp() is basically asking “are we b2g?”, to which the answer is “no”, so we skip that block, and go right for CallCreateWindow.<\/p>\n CallCreateWindow is using the IPC library to communicate with TabParent in the UI process, which has a corresponding function called AnswerCreateWindow. Here it is:<\/p>\n So after some checks, we call mBrowserDOMWindow’s OpenURIInFrame, with (among other things), nsIBrowserDOMWindow::OPEN_NEWTAB. So that’s why we’ve got a new tab opening instead of a new window.<\/p>\n mBrowserDOMWindow is a reference to this thing implemented in browser.js:<\/p>\n So nsBrowserAccess’s openURIInFrame only<\/strong> supports opening things in new tabs, and then it just calls _openURIInNewTab on itself, which does the job of returning the tab’s remote browser after the tab is opened.<\/p>\n I might follow this up with a post about how nsContentTreeOwner opens a window in the non-Electrolysis case, and how we might abstract some of that out for re-use here. We’ll see.<\/p>\n And that’s about it. Hopefully this is useful to future spelunkers.<\/p>\n","protected":false},"excerpt":{"rendered":" Hey. I’ve started hacking on Electrolysis bugs. I’m normally a front-end engineer working on Firefox desktop, but I’ve been temporarily loaned out to help get Electrolysis ready to be enabled by default on Nightly. I’m working on bug 989501. Basically, when you click on a link that targets “_blank” or uses window.open, we open a […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[874,861],"tags":[1074,1072,1069,125,35,1042,1073],"class_list":["post-2480","post","type-post","status-publish","format-standard","hentry","category-firefox-mozilla-2","category-mozilla-2","tag-do_getinterface","tag-docshell","tag-e10s","tag-firefox","tag-mozilla","tag-tabs","tag-xpcom"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/prmTy-E0","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/posts\/2480","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/comments?post=2480"}],"version-history":[{"count":4,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/posts\/2480\/revisions"}],"predecessor-version":[{"id":2485,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/posts\/2480\/revisions\/2485"}],"wp:attachment":[{"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/media?parent=2480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/categories?post=2480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mikeconley.ca\/blog\/wp-json\/wp\/v2\/tags?post=2480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}#0\u00a0 mozilla::dom::TabChild::ProvideWindow (this=0x109afb400, aParent=0x10b098820, aChromeFlags=4094, aCalledFromJS=false, aPositionSpecified=false, aSizeSpecified=false, aURI=0xffe, aName=@0x0, aFeatures=@0x0, aWindowIsNew=0x10b098820, aReturn=0x7fff5fbfb648) at TabChild.cpp:1201\r\n#1\u00a0 0x00000001018682e4 in nsWindowWatcher::OpenWindowInternal (this=0x10b05b540, aParent=0x10b098820, aUrl=<value temporarily unavailable, due to optimizations>, aName=<value temporarily unavailable, due to optimizations>, aFeatures=<value temporarily unavailable, due to optimizations>, aCalledFromJS=false, aDialog=<value temporarily unavailable, due to optimizations>, aNavigate=<value temporarily unavailable, due to optimizations>, _retval=<value temporarily unavailable, due to optimizations>) at nsWindowWatcher.cpp:601\r\n#2\u00a0 0x0000000101869544 in non-virtual thunk to nsWindowWatcher::OpenWindow2(nsIDOMWindow*, char const*, char const*, char const*, bool, bool, bool, nsISupports*, nsIDOMWindow**) () at nsWindowWatcher.cpp:417\r\n#3\u00a0 0x0000000100e5dc63 in nsGlobalWindow::OpenInternal (this=0x10b098800, aUrl=@0x7fff5fbfbf90, aName=@0x7fff5fbfc038, aOptions=@0x103d77320, aDialog=false, aContentModal=false, aCalleePrincipal=<value temporarily unavailable, due to optimizations>, aJSCallerContext=<value temporarily unavailable, due to optimizations>, aReturn=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/dom\/base\/nsGlobalWindow.cpp:11498\r\n#4\u00a0 0x0000000100e5e3a4 in non-virtual thunk to nsGlobalWindow::OpenNoNavigate(nsAString_internal const&, nsAString_internal const&, nsAString_internal const&, nsIDOMWindow**) () at \/Users\/mikeconley\/Projects\/mozilla-central\/dom\/base\/nsGlobalWindow.cpp:7463\r\n#5\u00a0 0x000000010184d99d in nsDocShell::InternalLoad (this=<value temporarily unavailable, due to optimizations>, aURI=0x113eed200, aReferrer=0x1134c0fe0, aOwner=0x114a69070, aFlags=0, aWindowTarget=0x10b098820, aLoadType=<value temporarily unavailable, due to optimizations>, aSHEntry=<value temporarily unavailable, due to optimizations>, aSourceDocShell=<value temporarily unavailable, due to optimizations>, aDocShell=<value temporarily unavailable, due to optimizations>, aRequest=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:9079\r\n#6\u00a0 0x0000000101855758 in nsDocShell::OnLinkClickSync (this=0x10b075000, aContent=0x112865eb0, aURI=0x113eed3c0, aTargetSpec=<value temporarily unavailable, due to optimizations>, aFileName=@0x106f27f10, aPostDataStream=0x0, aDocShell=<value temporarily unavailable, due to optimizations>, aRequest=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:12699\r\n#7\u00a0 0x0000000101857f85 in mozilla::Maybe<mozilla::AutoCxPusher>::~Maybe () at \/Users\/mikeconley\/Projects\/mozilla-central\/obj-x86_64-apple-darwin12.5.0\/dist\/include\/nsCxPusher.h:12499\r\n#8\u00a0 0x0000000101857f85 in nsCxPusher::~nsCxPusher () at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:41\r\n#9\u00a0 0x0000000101857f85 in nsCxPusher::~nsCxPusher () at \/Users\/mikeconley\/Projects\/mozilla-central\/obj-x86_64-apple-darwin12.5.0\/dist\/include\/nsCxPusher.h:66\r\n#10 0x0000000101857f85 in OnLinkClickEvent::Run (this=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:12502\r\n#11 0x0000000100084f60 in nsThread::ProcessNextEvent (this=0x106f245e0, mayWait=false, result=0x7fff5fbfc947) at nsThread.cpp:715\r\n#12 0x0000000100023241 in NS_ProcessPendingEvents (thread=<value temporarily unavailable, due to optimizations>, timeout=20) at nsThreadUtils.cpp:210\r\n#13 0x0000000100d41c47 in nsBaseAppShell::NativeEventCallback (this=0x1096e8660) at nsBaseAppShell.cpp:98\r\n#14 0x0000000100cfdba1 in nsAppShell::ProcessGeckoEvents (aInfo=0x1096e8660) at nsAppShell.mm:388\r\n#15 0x00007fff86adeb31 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ ()\r\n#16 0x00007fff86ade455 in __CFRunLoopDoSources0 ()\r\n#17 0x00007fff86b017f5 in __CFRunLoopRun ()\r\n#18 0x00007fff86b010e2 in CFRunLoopRunSpecific ()\r\n#19 0x00007fff8ad65eb4 in RunCurrentEventLoopInMode ()\r\n#20 0x00007fff8ad65c52 in ReceiveNextEventCommon ()\r\n#21 0x00007fff8ad65ae3 in BlockUntilNextEventMatchingListInMode ()\r\n#22 0x00007fff8cce1533 in _DPSNextEvent ()\r\n#23 0x00007fff8cce0df2 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()\r\n#24 0x0000000100cfd266 in -[GeckoNSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] (self=0x106f801a0, _cmd=<value temporarily unavailable, due to optimizations>, mask=18446744073709551615, expiration=0x422d63c37f00000d, mode=0x7fff7205e1c0, flag=1 '\\001') at nsAppShell.mm:165\r\n#25 0x00007fff8ccd81a3 in -[NSApplication run] ()\r\n#26 0x0000000100cfe32b in nsAppShell::Run (this=<value temporarily unavailable, due to optimizations>) at nsAppShell.mm:746\r\n#27 0x000000010199b3dc in XRE_RunAppShell () at \/Users\/mikeconley\/Projects\/mozilla-central\/toolkit\/xre\/nsEmbedFunctions.cpp:679\r\n#28 0x00000001002a0dae in MessageLoop::AutoRunState::~AutoRunState () at message_loop.cc:229\r\n#29 0x00000001002a0dae in MessageLoop::AutoRunState::~AutoRunState () at \/Users\/mikeconley\/Projects\/mozilla-central\/ipc\/chromium\/src\/base\/message_loop.h:197\r\n#30 0x00000001002a0dae in MessageLoop::Run (this=0x0) at message_loop.cc:503\r\n#31 0x000000010199b0cd in XRE_InitChildProcess (aArgc=<value temporarily unavailable, due to optimizations>, aArgv=<value temporarily unavailable, due to optimizations>, aProcess=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/toolkit\/xre\/nsEmbedFunctions.cpp:516\r\n#32 0x0000000100000f1d in main (argc=<value temporarily unavailable, due to optimizations>, argv=0x7fff5fbff4d8) at \/Users\/mikeconley\/Projects\/mozilla-central\/ipc\/app\/MozillaRuntimeMain.cpp:149<\/pre>\n
#0\u00a0 mozilla::dom::TabChild::ProvideWindow (this=0x109afb400, aParent=0x10b098820, aChromeFlags=4094, aCalledFromJS=false, aPositionSpecified=false, aSizeSpecified=false, aURI=0xffe, aName=@0x0, aFeatures=@0x0, aWindowIsNew=0x10b098820, aReturn=0x7fff5fbfb648) at TabChild.cpp:1201\r\n#1\u00a0 0x00000001018682e4 in nsWindowWatcher::OpenWindowInternal (this=0x10b05b540, aParent=0x10b098820, aUrl=<value temporarily unavailable, due to optimizations>, aName=<value temporarily unavailable, due to optimizations>, aFeatures=<value temporarily unavailable, due to optimizations>, aCalledFromJS=false, aDialog=<value temporarily unavailable, due to optimizations>, aNavigate=<value temporarily unavailable, due to optimizations>, _retval=<value temporarily unavailable, due to optimizations>) at nsWindowWatcher.cpp:601\r\n#2\u00a0 0x0000000101869544 in non-virtual thunk to nsWindowWatcher::OpenWindow2(nsIDOMWindow*, char const*, char const*, char const*, bool, bool, bool, nsISupports*, nsIDOMWindow**) () at nsWindowWatcher.cpp:417\r\n#3\u00a0 0x0000000100e5dc63 in nsGlobalWindow::OpenInternal (this=0x10b098800, aUrl=@0x7fff5fbfbf90, aName=@0x7fff5fbfc038, aOptions=@0x103d77320, aDialog=false, aContentModal=false, aCalleePrincipal=<value temporarily unavailable, due to optimizations>, aJSCallerContext=<value temporarily unavailable, due to optimizations>, aReturn=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/dom\/base\/nsGlobalWindow.cpp:11498\r\n#4\u00a0 0x0000000100e5e3a4 in non-virtual thunk to nsGlobalWindow::OpenNoNavigate(nsAString_internal const&, nsAString_internal const&, nsAString_internal const&, nsIDOMWindow**) () at \/Users\/mikeconley\/Projects\/mozilla-central\/dom\/base\/nsGlobalWindow.cpp:7463\r\n#5\u00a0 0x000000010184d99d in nsDocShell::InternalLoad (this=<value temporarily unavailable, due to optimizations>, aURI=0x113eed200, aReferrer=0x1134c0fe0, aOwner=0x114a69070, aFlags=0, aWindowTarget=0x10b098820, aLoadType=<value temporarily unavailable, due to optimizations>, aSHEntry=<value temporarily unavailable, due to optimizations>, aSourceDocShell=<value temporarily unavailable, due to optimizations>, aDocShell=<value temporarily unavailable, due to optimizations>, aRequest=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:9079\r\n#6\u00a0 0x0000000101855758 in nsDocShell::OnLinkClickSync (this=0x10b075000, aContent=0x112865eb0, aURI=0x113eed3c0, aTargetSpec=<value temporarily unavailable, due to optimizations>, aFileName=@0x106f27f10, aPostDataStream=0x0, aDocShell=<value temporarily unavailable, due to optimizations>, aRequest=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:12699\r\n#7\u00a0 0x0000000101857f85 in mozilla::Maybe<mozilla::AutoCxPusher>::~Maybe () at \/Users\/mikeconley\/Projects\/mozilla-central\/obj-x86_64-apple-darwin12.5.0\/dist\/include\/nsCxPusher.h:12499\r\n#8\u00a0 0x0000000101857f85 in nsCxPusher::~nsCxPusher () at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:41\r\n#9\u00a0 0x0000000101857f85 in nsCxPusher::~nsCxPusher () at \/Users\/mikeconley\/Projects\/mozilla-central\/obj-x86_64-apple-darwin12.5.0\/dist\/include\/nsCxPusher.h:66\r\n#10 0x0000000101857f85 in OnLinkClickEvent::Run (this=<value temporarily unavailable, due to optimizations>) at \/Users\/mikeconley\/Projects\/mozilla-central\/docshell\/base\/nsDocShell.cpp:12502<\/pre>\n
if (aWindowTarget && *aWindowTarget)<\/pre>\n
\u00a0\u00a0\u00a0 if (aWindowTarget && *aWindowTarget) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ Locate the target DocShell.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsCOMPtr<nsIDocShellTreeItem> targetItem;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rv = FindItemWithName(aWindowTarget, nullptr, this,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(targetItem));<\/pre>\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 else if (name.LowerCaseEqualsLiteral(\"_blank\"))\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ Just return null.\u00a0 Caller must handle creating a new window with\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ a blank name himself.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return NS_OK;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }<\/pre>\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rv = FindItemWithName(aWindowTarget, nullptr, this,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(targetItem));\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NS_ENSURE_SUCCESS(rv, rv);\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 targetDocShell = do_QueryInterface(targetItem);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ If the targetDocShell doesn't exist, then this is a new docShell\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ and we should consider this a TYPE_DOCUMENT load\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 isNewDocShell = !targetDocShell;<\/pre>\n
\u00a0\u00a0 if (aWindowTarget && *aWindowTarget) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ We've already done our owner-inheriting.\u00a0 Mask out that bit, so we\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ don't try inheriting an owner from the target window if we came up\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ with a null owner above.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aFlags = aFlags & ~INTERNAL_LOAD_FLAGS_INHERIT_OWNER;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 bool isNewWindow = false;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if (!targetDocShell) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ If the docshell's document is sandboxed, only open a new window\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ if the document's SANDBOXED_AUXILLARY_NAVIGATION flag is not set.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ (i.e. if allow-popups is specified)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NS_ENSURE_TRUE(mContentViewer, NS_ERROR_FAILURE);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIDocument* doc = mContentViewer->GetDocument();\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 uint32_t sandboxFlags = 0;\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if (doc) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 sandboxFlags = doc->GetSandboxFlags();\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if (sandboxFlags & SANDBOXED_AUXILIARY_NAVIGATION) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return NS_ERROR_DOM_INVALID_ACCESS_ERR;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsCOMPtr<nsPIDOMWindow> win =\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 do_GetInterface(GetAsSupports(this));\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NS_ENSURE_TRUE(win, NS_ERROR_NOT_AVAILABLE);\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsDependentString name(aWindowTarget);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsCOMPtr<nsIDOMWindow> newWin;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsAutoCString spec;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if (aURI)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aURI->GetSpec(spec);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rv = win->OpenNoNavigate(NS_ConvertUTF8toUTF16(spec),\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 name,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ window name\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 EmptyString(), \/\/ Features\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(newWin));<\/pre>\n\u00a0 return OpenInternal(aUrl, aName, aOptions,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 false,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aDialog\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 false,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aContentModal\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 true,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aCalledNoScript\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 false,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aDoJSFixups\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 false,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aNavigate\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nullptr, nullptr,\u00a0 \/\/ No args\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 GetPrincipal(),\u00a0\u00a0\u00a0 \/\/ aCalleePrincipal\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nullptr,\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ aJSCallerContext\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 _retval);<\/pre>\n
\u00a0\u00a0\u00a0\u00a0\u00a0 rv = pwwatch->OpenWindow2(this, url.get(), name_ptr, options_ptr,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/* aCalledFromScript = *\/ false,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aDialog, aNavigate, aExtraArgument,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(domReturn));<\/pre>\n
nsCOMPtr<nsIDocShellTreeOwner>\u00a0 parentTreeOwner;\u00a0 \/\/ from the parent window, if any\r\n...\r\nGetWindowTreeOwner(aParent, getter_AddRefs(parentTreeOwner));<\/pre>\n
\u00a0 \/\/ try to find an extant window with the given name\r\n\u00a0 nsCOMPtr<nsIDOMWindow> foundWindow = SafeGetWindowByName(name, aParent);\r\n\u00a0 GetWindowTreeItem(foundWindow, getter_AddRefs(newDocShellItem));<\/pre>\n
\u00a0\u00a0\u00a0\u00a0\u00a0 nsCOMPtr<nsIWindowProvider> provider = do_GetInterface(parentTreeOwner);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 if (provider) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NS_ASSERTION(aParent, \"We've _got_ to have a parent here!\");\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsCOMPtr<nsIDOMWindow> newWindow;\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rv = provider->ProvideWindow(aParent, chromeFlags, aCalledFromJS,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 sizeSpec.PositionSpecified(),\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 sizeSpec.SizeSpecified(),\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 uriToLoad, name, features, &windowIsNew,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(newWindow));<\/pre>\nNS_IMETHODIMP\r\nTabChild::ProvideWindow(nsIDOMWindow* aParent, uint32_t aChromeFlags,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 bool aCalledFromJS,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 bool aPositionSpecified, bool aSizeSpecified,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIURI* aURI, const nsAString& aName,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 const nsACString& aFeatures, bool* aWindowIsNew,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIDOMWindow** aReturn)\r\n{\r\n\u00a0\u00a0\u00a0 *aReturn = nullptr;\r\n\r\n\u00a0\u00a0\u00a0 \/\/ If aParent is inside an <iframe mozbrowser> or <iframe mozapp> and this\r\n\u00a0\u00a0\u00a0 \/\/ isn't a request to open a modal-type window, we're going to create a new\r\n\u00a0\u00a0\u00a0 \/\/ <iframe mozbrowser\/mozapp> and return its window here.\r\n\u00a0\u00a0\u00a0 nsCOMPtr<nsIDocShell> docshell = do_GetInterface(aParent);\r\n\u00a0\u00a0\u00a0 if (docshell && docshell->GetIsInBrowserOrApp() &&\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 !(aChromeFlags & (nsIWebBrowserChrome::CHROME_MODAL |\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIWebBrowserChrome::CHROME_OPENAS_DIALOG |\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIWebBrowserChrome::CHROME_OPENAS_CHROME))) {\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ Note that BrowserFrameProvideWindow may return NS_ERROR_ABORT if the\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ open window call was canceled.\u00a0 It's important that we pass this error\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ code back to our caller.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 return BrowserFrameProvideWindow(aParent, aURI, aName, aFeatures,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 aWindowIsNew, aReturn);\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 \/\/ Otherwise, create a new top-level window.\r\n\u00a0\u00a0\u00a0 PBrowserChild* newChild;\r\n\u00a0\u00a0\u00a0 if (!CallCreateWindow(&newChild)) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return NS_ERROR_NOT_AVAILABLE;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 *aWindowIsNew = true;\r\n\u00a0\u00a0\u00a0 nsCOMPtr<nsIDOMWindow> win =\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 do_GetInterface(static_cast<TabChild*>(newChild)->WebNavigation());\r\n\u00a0\u00a0\u00a0 win.forget(aReturn);\r\n\u00a0\u00a0\u00a0 return NS_OK;\r\n}<\/pre>\nbool\r\nTabParent::AnswerCreateWindow(PBrowserParent** retval)\r\n{\r\n\u00a0\u00a0\u00a0 if (!mBrowserDOMWindow) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return false;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 \/\/ Only non-app, non-browser processes may call CreateWindow.\r\n\u00a0\u00a0\u00a0 if (IsBrowserOrApp()) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return false;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 \/\/ Get a new rendering area from the browserDOMWin.\u00a0 We don't want\r\n\u00a0\u00a0\u00a0 \/\/ to be starting any loads here, so get it with a null URI.\r\n\u00a0\u00a0\u00a0 nsCOMPtr<nsIFrameLoaderOwner> frameLoaderOwner;\r\n\u00a0\u00a0\u00a0 mBrowserDOMWindow->OpenURIInFrame(nullptr, nullptr,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIBrowserDOMWindow::OPEN_NEWTAB,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nsIBrowserDOMWindow::OPEN_NEW,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 getter_AddRefs(frameLoaderOwner));\r\n\u00a0\u00a0\u00a0 if (!frameLoaderOwner) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return false;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 nsRefPtr<nsFrameLoader> frameLoader = frameLoaderOwner->GetFrameLoader();\r\n\u00a0\u00a0\u00a0 if (!frameLoader) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 return false;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 *retval = frameLoader->GetRemoteBrowser();\r\n\u00a0\u00a0\u00a0 return true;\r\n}<\/pre>\nfunction nsBrowserAccess() { }\r\n\r\nnsBrowserAccess.prototype = {\r\n\u00a0 QueryInterface: XPCOMUtils.generateQI([Ci.nsIBrowserDOMWindow, Ci.nsISupports]),\r\n\r\n\u00a0 _openURIInNewTab: function(aURI, aOpener, aIsExternal) {\r\n\u00a0\u00a0\u00a0 let win, needToFocusWin;\r\n\r\n\u00a0\u00a0\u00a0 \/\/ try the current window.\u00a0 if we're in a popup, fall back on the most recent browser window\r\n\u00a0\u00a0\u00a0 if (window.toolbar.visible)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 win = window;\r\n\u00a0\u00a0\u00a0 else {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 let isPrivate = PrivateBrowsingUtils.isWindowPrivate(aOpener || window);\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 win = RecentWindow.getMostRecentBrowserWindow({private: isPrivate});\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 needToFocusWin = true;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 if (!win) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 \/\/ we couldn't find a suitable window, a new one needs to be opened.\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 return null;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 if (aIsExternal && (!aURI || aURI.spec == \"about:blank\")) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 win.BrowserOpenTab(); \/\/ this also focuses the location bar\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 win.focus();\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 return win.gBrowser.selectedBrowser;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 let loadInBackground = gPrefService.getBoolPref(\"browser.tabs.loadDivertedInBackground\");\r\n\u00a0\u00a0\u00a0 let referrer = aOpener ? makeURI(aOpener.location.href) : null;\r\n\r\n\u00a0\u00a0\u00a0 let tab = win.gBrowser.loadOneTab(aURI ? aURI.spec : \"about:blank\", {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 referrerURI: referrer,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 fromExternal: aIsExternal,\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 inBackground: loadInBackground});\r\n\u00a0\u00a0\u00a0 let browser = win.gBrowser.getBrowserForTab(tab);\r\n\r\n\u00a0\u00a0\u00a0 if (needToFocusWin || (!loadInBackground && aIsExternal))\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 win.focus();\r\n\r\n\u00a0\u00a0\u00a0 return browser;\r\n\u00a0 },\r\n\r\n\u00a0 openURI: function (aURI, aOpener, aWhere, aContext) {\r\n ... (removed for brevity)\r\n\u00a0 },\r\n\r\n\u00a0 openURIInFrame: function browser_openURIInFrame(aURI, aOpener, aWhere, aContext) {\r\n\u00a0\u00a0\u00a0 if (aWhere != Ci.nsIBrowserDOMWindow.OPEN_NEWTAB) {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 dump(\"Error: openURIInFrame can only open in new tabs\");\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 return null;\r\n\u00a0\u00a0\u00a0 }\r\n\r\n\u00a0\u00a0\u00a0 var isExternal = (aContext == Ci.nsIBrowserDOMWindow.OPEN_EXTERNAL);\r\n\u00a0\u00a0\u00a0 let browser = this._openURIInNewTab(aURI, aOpener, isExternal);\r\n\u00a0\u00a0\u00a0 if (browser)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 return browser.QueryInterface(Ci.nsIFrameLoaderOwner);\r\n\r\n\u00a0\u00a0\u00a0 return null;\r\n\u00a0 },\r\n\r\n\u00a0 isTabContentWindow: function (aWindow) {\r\n\u00a0\u00a0\u00a0 return gBrowser.browsers.some(function (browser) browser.contentWindow == aWindow);\r\n\u00a0 },\r\n\r\n\u00a0 get contentWindow() {\r\n\u00a0\u00a0\u00a0 return gBrowser.contentWindow;\r\n\u00a0 }\r\n}<\/pre>\n