defaultOpenerPolicy constant

String const defaultOpenerPolicy

The default value for openerPolicy: same-origin-allow-popups.

Severs the opener relationship with a cross-origin document that opened this one (the isolation of same-origin), while still allowing the popups this document opens to keep a handle back to it. That is what popup-based sign-in flows need (Sign in with Google, OAuth popups): the popup reports its result by calling back into its opener.

A document served by this server that is itself opened as a cross-origin popup and calls window.opener (an OAuth callback landing page) must disable this with none.

Implementation

static const String defaultOpenerPolicy = 'same-origin-allow-popups';