Living Standard — Last Updated 31 May 2023
Window,
WindowProxy, and Location objectsWindow objectWindowProxy exotic objectLocation interfaceHistory interfaceWindow,
WindowProxy, and Location objectsAlthough typically objects cannot be accessed across origins, the web platform would not be true to itself if it did not have some legacy exceptions to that rule that the web depends upon.
This section uses the terminology and typographic conventions from the JavaScript specification. [JAVASCRIPT]
When perform a security check is invoked, with a platformObject, identifier, and type, run these steps:
If platformObject is not a Window or Location object,
then return.
For each e of CrossOriginProperties(platformObject):
If SameValue(e.[[Property]], identifier) is true, then:
If type is "method" and e has neither
[[NeedsGet]] nor [[NeedsSet]], then return.
Otherwise, if type is "getter" and
e.[[NeedsGet]] is true, then return.
Otherwise, if type is "setter" and
e.[[NeedsSet]] is true, then return.
If IsPlatformObjectSameOrigin(platformObject) is false, then
throw a " The [[CrossOriginPropertyDescriptorMap]] internal slot contains a map
with entries whose keys are (currentGlobal, objectGlobal,
propertyKey)-tuples and values are property descriptors, as a memoization of what is
visible to scripts when currentGlobal inspects a User agents should allow a value held in the map to be garbage collected along with its
corresponding key when nothing holds a reference to any part of the value. That is, as long as
garbage collection is not observable. For example, with User agents may have an optimization whereby they remove key-value pairs from the map when
For example, setting If O is a Return «
{ [[Property]]: " This abstract operation does not return a Completion Record. Indexed properties do not need to be safelisted in this algorithm, as they are
handled directly by the A JavaScript property name P is a cross-origin accessible window property
name if it is " If P is " Throw a " Return true if the current settings object's origin is same origin-domain with
O's relevant settings object's origin, and false otherwise. This abstract operation does not return a Completion Record. Here the current settings object roughly corresponds to the "caller",
because this check occurs before the execution
context for the getter/setter/method in question makes its way onto the JavaScript
execution context stack. For example, in the code If this abstract operation returns undefined and there is no custom behavior, the
caller needs to throw a " Let crossOriginKey be a tuple consisting of the current settings
object, O's relevant settings object, and P. For each e of CrossOriginProperties(O): If SameValue(e.[[Property]], P) is true, then: If the value of the [[CrossOriginPropertyDescriptorMap]] internal slot of
O contains an entry whose key is crossOriginKey, then return that
entry's value. Let originalDesc be OrdinaryGetOwnProperty(O,
P). Let crossOriginDesc be undefined. If e.[[NeedsGet]] and e.[[NeedsSet]] are absent, then: Let value be originalDesc.[[Value]]. If IsCallable(value) is true, then set value to
an anonymous built-in function, created in the current realm, that performs
the same steps as the IDL operation P on object O. Set crossOriginDesc to PropertyDescriptor{
[[Value]]: value,
[[Enumerable]]: false,
[[Writable]]: false,
[[Configurable]]: true }. Otherwise: Let crossOriginGet be undefined. If e.[[NeedsGet]] is true, then set crossOriginGet to an
anonymous built-in function, created in the current realm, that performs the
same steps as the getter of the IDL attribute P on object
O. Let crossOriginSet be undefined. If e.[[NeedsSet]] is true, then set crossOriginSet to an
anonymous built-in function, created in the current realm, that performs the
same steps as the setter of the IDL attribute P on object
O. Set crossOriginDesc to PropertyDescriptor{
[[Get]]: crossOriginGet,
[[Set]]: crossOriginSet,
[[Enumerable]]: false,
[[Configurable]]: true }. Create an entry in the value of the [[CrossOriginPropertyDescriptorMap]]
internal slot of O with key crossOriginKey and value
crossOriginDesc. Return crossOriginDesc. Return undefined. This abstract operation does not return a Completion Record. The reason that the property descriptors produced here are configurable is to
preserve the invariants of the essential internal methods required by the JavaScript
specification. In particular, since the value of the property can change as a consequence of
navigation, it is required that the property be configurable. (However, see tc39/ecma262 issue #672 and references to it
elsewhere in this specification for cases where we are not able to preserve these invariants, for
compatibility with existing web content.) [JAVASCRIPT] The reason the property descriptors are non-enumerable, despite this mismatching
the same-origin behavior, is for compatibility with existing web content. See issue #3183 for details. Let desc be ? O.[[GetOwnProperty]](P). Assert: desc is not undefined. If IsDataDescriptor(desc) is true, then return
desc.[[Value]]. Assert: IsAccessorDescriptor(desc) is true. Let getter be desc.[[Get]]. If getter is undefined, then throw a " Let desc be ? O.[[GetOwnProperty]](P). Assert: desc is not undefined. If desc.[[Set]] is present and its value is not undefined, then:
Perform ? Call(setter, Receiver,
«V»). Return true. Throw a " Let keys be a new empty List. For each e of CrossOriginProperties(O), append e.[[Property]] to keys. Return the concatenation of keys and « " This abstract operation does not return a Completion Record. Support in all current engines. Support in all current engines. Support in all current engines. Support in all current engines. These attributes all return window. Support in all current engines. Returns the Support in all current engines. Returns the The A A The The The The If this's browsing context is null,
then return null. Return this's browsing context's
Support in all current engines. For historical reasons, Support in all current engines. Opens a window to show url (defaults to " These behave equivalently to the Encourages user agents to provide a minimal web browser user interface for the new
window. (Impacts the Support in all current engines. Returns the name of the window. Can be set, to change the name. Support in all current engines. Closes the window. Support in all current engines. Returns true if the window has been closed, false otherwise. Support in all current engines. Cancels the document load. The window open steps, given a string url, a string target,
and a string features, are as follows: If the event loop's termination nesting level is nonzero,
return null. Let sourceDocument be the entry global object's associated If target is the empty string, then set target to " Let tokenizedFeatures be the result of tokenizing features. Let noopener and noreferrer be false. If tokenizedFeatures[" Set noopener to the result of parsing
tokenizedFeatures[" Remove tokenizedFeatures[" If tokenizedFeatures[" Set noreferrer to the result of parsing
tokenizedFeatures[" Remove tokenizedFeatures[" Let referrerPolicy be the empty string. If noreferrer is true, then set noopener to true and set
referrerPolicy to " Let targetNavigable and windowType be the result of applying the
rules for choosing a navigable given target, sourceDocument's
node navigable, and noopener. If there is a user agent that supports control-clicking a link to open it in
a new tab, and the user control-clicks on an element whose If targetNavigable is null, then return null. If windowType is either " Set targetNavigable's active browsing context's
is popup to the result of checking if a
popup window is requested, given tokenizedFeatures. Set up browsing context features for targetNavigable's active browsing context given tokenizedFeatures.[CSSOMVIEW] Let urlRecord be the URL record
If url is not the empty string, then parse
url relative to the entry settings object, and set
urlRecord to the resulting URL record, if any. If the parse a
URL algorithm failed, then throw a " This is necessary in case url is something like Otherwise, navigate targetNavigable
to urlRecord using sourceDocument, with referrerPolicy set to referrerPolicy and
exceptionsEnabled set to true. Otherwise: If url is not the empty string, then: Let urlRecord be the URL record
Parse url relative to the entry
settings object, and set urlRecord to the resulting URL
record, if any. If the parse a URL algorithm failed, then throw a
" If noopener is false, then set targetNavigable's active browsing context's opener browsing context to
sourceDocument's browsing
context. If noopener is true or windowType is " Return targetNavigable's active
The The method provides a mechanism for navigating an
existing browsing context or opening and navigating an auxiliary browsing
context. To tokenize the features
argument: Let tokenizedFeatures be a new ordered map. Let position point at the first code point of features. While position is not past the end of features: Let name be the empty string. Let value be the empty string. Collect a sequence of code points that are feature separators from features given position. This
skips past leading separators before the name. Collect a sequence of code points that are not feature separators from features given position. Set
name to the collected characters, converted to ASCII lowercase. Set name to the result of normalizing the feature name
name. While position is not past the end of features and the
code point at position in features is not U+003D (=): If the code point at position in features is U+002C (,), or if
it is not a feature separator, then break. Advance position by 1. This skips to the first U+003D (=) but does not skip past a U+002C (,) or a
non-separator. If the code point at position in features is a feature
separator: While position is not past the end of features and the code point
at position in features is a feature separator: If the code point at position in features is U+002C (,), then
break. Advance position by 1. This skips to the first non-separator but does not skip past a U+002C
(,). Collect a sequence of code points that are not feature separators code points from features given
position. Set value to the collected code points, converted to
ASCII lowercase. If name is not the empty string, then set
tokenizedFeatures[name] to value. Return tokenizedFeatures. To check if a window feature is set, given
tokenizedFeatures, featureName, and defaultValue: If tokenizedFeatures[featureName] exists, then return the result of parsing
tokenizedFeatures[featureName] as a boolean feature. Return defaultValue. To check if a popup window is requested, given
tokenizedFeatures: If tokenizedFeatures is empty, then return
false. If tokenizedFeatures[" Let location be the result of checking if
a window feature is set, given tokenizedFeatures, " Let toolbar be the result of checking if
a window feature is set, given tokenizedFeatures, " If location and toolbar are both false, then return true. Let menubar be the result of checking if
a window feature is set, given tokenizedFeatures, If menubar is false, then return true. Let resizable be the result of checking if
a window feature is set, given tokenizedFeatures, " If resizable is false, then return true. Let scrollbars be the result of checking
if a window feature is set, given tokenizedFeatures, " If scrollbars is false, then return true. Let status be the result of checking if
a window feature is set, given tokenizedFeatures, " If status is false, then return true. Return false. A code point is a feature separator if it is ASCII whitespace, U+003D
(=), or U+002C (,). For legacy reasons, there are some aliases of some feature names. To normalize a feature name name, switch on name: To parse a boolean feature given
a string value: If value is the empty string, then return true. If value is " If value is " Let parsed be the result of parsing
value as an integer. If parsed is an error, then set it to 0. Return false if parsed is 0, and true otherwise. The Return this's navigable's target name. The Set this's navigable's active session history entry's document state's navigable target name to the given value. The name gets reset when the navigable is navigated to another origin. The Let thisTraversable be null. For each top-level traversable
traversable of the user agent's top-level traversable set: if
traversable's active document's relevant
global object equals this, then set thisTraversable to
traversable and break. If thisTraversable is null, then return. In this case the method is being called on a If thisTraversable's is closing is true, then return. Let browsingContext be thisTraversable's active browsing context. Let sourceSnapshotParams be the result of snapshotting source snapshot
params given thisTraversable's active
document. If all the following are true: then: Set thisTraversable's is closing to true. Queue a task on the DOM manipulation task source to close thisTraversable. A navigable is script-closable if its active
browsing context is an auxiliary browsing context that was created by a
script (as opposed to by an action of the user), or if it is a top-level traversable
whose session history entries's size is 1. The The Support in all current engines. Returns the number of document-tree child navigables. Returns the The Indexed access to document-tree child navigables is defined through
the [[GetOwnProperty]] internal method of the
Returns the indicated element or collection of elements. As a general rule, relying on this will lead to brittle code. Which IDs end up mapping to
this API can vary over time, as new features are added to the web platform, for example. Instead
of this, use The document-tree child
navigable target name property set of a Let children be the document-tree child navigables of
window's associated
Let firstNamedChildren be an empty ordered
set. For each navigable of children: Let name be navigable's target name. If name is the empty string, then continue. If firstNamedChildren contains a
navigable whose target name is name,
then continue. Append navigable to
firstNamedChildren. Let names be an empty ordered set. For each navigable of
firstNamedChildren: Let name be navigable's target name. If navigable's active document's origin is same origin with
window's relevant settings object's origin, then append name to names. Return names. The two seperate iterations mean that in the following example, hosted on The window's document-tree child navigable target name property
set; the value of the the value of the To determine the value of a named property
name in a Let objects be the list of named
objects of window with the name name. There will be at least one such object, since the algorithm would otherwise not
have been invoked by Web IDL. If objects contains a navigable, then: Let container be the first navigable container in
window's associated
Return container's content navigable's active Otherwise, if objects has only one element, return that element. Otherwise return an Named objects of document-tree child navigables of window's associated HTML elements that have an Since the Support in all current engines. Returns the Support in all current engines. Returns the Returns null if there isn't one or if it has been set to null. Can be set to null. Support in all current engines. Returns the Support in all current engines. Returns the navigable container element. Returns null if there isn't one, and in cross-origin situations. The Return this's navigable's top-level traversable's active
The Let current be this's browsing
context. If current is null, then return null. If current's opener browsing context is null, then return
null. Return current's opener browsing context's
The If the given value is null and this's browsing
context is non-null, then set this's browsing
context's opener browsing context to null. If the given value is non-null, then return ?
OrdinaryDefineOwnProperty(this, " Setting By default, scripts can access their opener browsing context's
The If navigable is null, then return null. If navigable's parent is not null, then set
navigable to navigable's parent. Return navigable's active
The Let current be this's node navigable. If current is null, then return null. Let container be current's container. If container is null, then return null. If container's node document's origin is not same origin-domain with the
current settings object's origin, then return null. Return container. An example of when these properties can return null is as follows: Here the browsing context corresponding to For historical reasons, the For privacy and interoperability reasons, those properties now return values that
represent whether the Each interface element is represented by a Support in all current engines. Support in all current engines. Support in all current engines. Support in all current engines. Support in all current engines. Support in all current engines. Support in all current engines. Returns true if the Support in all current engines. The Let browsingContext be this's relevant global
object's browsing context. If browsingContext is null, then return true. Return the negation of browsingContext's top-level
browsing context's is popup. The following The The The The The The For historical reasons, the To set up a window environment settings object, given a URL
creationURL, a JavaScript execution context execution context,
null or an environment reservedEnvironment, a URL
topLevelCreationURL, and an origin topLevelOrigin, run these
steps: Let realm be the value of execution context's Realm
component. Let window be realm's global
object. Let settings object be a new environment settings object whose
algorithms are defined as follows: Return execution context. Return the module map of
window's associated
Return the current character encoding
of window's associated
Return the current base URL of window's
associated Return the origin of window's
associated Return the policy container of
window's associated
Return true if both of the following hold, and false otherwise: realm's agent cluster's cross-origin-isolation mode is " window's associated
Return window's associated
If reservedEnvironment is non-null, then: Set settings object's id to
reservedEnvironment's id, target browsing context to
reservedEnvironment's target browsing context, and active service worker to
reservedEnvironment's active service worker. Set reservedEnvironment's id to
the empty string. The identity of the reserved environment is considered to be fully
transferred to the created environment settings object. The reserved environment
is not searchable by the environment’s id from this point on. Otherwise, set settings object's id to a new unique opaque string, settings
object's target browsing
context to null, and settings object's active service worker to null. Set settings object's creation
URL to creationURL, settings object's top-level creation
URL to topLevelCreationURL, and settings object's top-level
origin to topLevelOrigin. Set realm's [[HostDefined]] field to settings object. A The There is no Every Although Let W be the value of the
[[Window]] internal slot of
this. If IsPlatformObjectSameOrigin(W) is true, then return !
OrdinaryGetPrototypeOf(W). Return null. Return ! SetImmutablePrototype(this, V). Return true. Return false. Let W be the value of the
[[Window]] internal slot of
this. If P is an array index property name, then: Let index be ! ToUint32(P). Let children be the document-tree child navigables of
W's associated
Let value be undefined. If index is less than children's size, then: Sort children in ascending order, with
navigableA being less than navigableB if navigableA's container was inserted into W's associated Set value to children[index]'s active If value is undefined, then: If IsPlatformObjectSameOrigin(W) is true, then return !
OrdinaryGetOwnProperty(W, P). This is a willful violation of the JavaScript specification's
invariants of the essential internal methods to maintain compatibility with
existing web content. See tc39/ecma262
issue #672 for more information. [JAVASCRIPT] Let property be CrossOriginGetOwnPropertyHelper(W,
P). If property is not undefined, then return property. If property is undefined and P is in W's document-tree
child navigable target name property set, then: Let value be the active
Return PropertyDescriptor{
[[Value]]: value,
[[Enumerable]]: false,
[[Writable]]: false,
[[Configurable]]: true }. The reason the property descriptors are non-enumerable, despite this
mismatching the same-origin behavior, is for compatibility with existing web content. See issue #3183 for details. Return ? CrossOriginPropertyFallback(P). Let W be the value of the
[[Window]] internal slot of
this. If IsPlatformObjectSameOrigin(W) is true, then:
If P is an array index property name, return false. Return ? OrdinaryDefineOwnProperty(W, P,
Desc). This is a willful violation of the JavaScript specification's
invariants of the essential internal methods to maintain compatibility with
existing web content. See tc39/ecma262
issue #672 for more information. [JAVASCRIPT] Throw a " Let W be the value of the
[[Window]] internal slot of
this. Check if an access between two browsing contexts
should be reported, given the current global object's
browsing context, W's browsing context, P, and the current settings
object. If IsPlatformObjectSameOrigin(W) is true, then return ?
OrdinaryGet(this, P, Receiver). Return ? CrossOriginGet(this, P,
Receiver). this is passed rather than W as OrdinaryGet and
CrossOriginGet will invoke the [[GetOwnProperty]] internal method. Let W be the value of the
[[Window]] internal slot of
this. Check if an access between two browsing contexts
should be reported, given the current global object's browsing
context, W's browsing context, P,
and the current settings object. If IsPlatformObjectSameOrigin(W) is true, then: If P is an array index property name,
then return false. Return ? OrdinarySet(W, P, V,
Receiver). Return ? CrossOriginSet(this, P, V,
Receiver). this is passed rather than W as CrossOriginSet
will invoke the [[GetOwnProperty]]
internal method. Let W be the value of the
[[Window]] internal slot of
this. If IsPlatformObjectSameOrigin(W) is true, then:
If P is an array index property name, then: Let desc be ! this.[[GetOwnProperty]](P). If desc is undefined, then return true. Return false. Return ? OrdinaryDelete(W, P). Throw a " Let W be the value of the [[Window]] internal slot of this. Let maxProperties be W's associated Let keys be the range 0 to
maxProperties, exclusive. If IsPlatformObjectSameOrigin(W) is true, then return the
concatenation of keys and
OrdinaryOwnPropertyKeys(W). Return the concatenation of keys and !
CrossOriginOwnPropertyKeys(W). Support in all current engines. Support in all current engines. Support in all current engines. Each The To create a Let location be a new Let valueOf be location's relevant
realm.[[Intrinsics]].[[%Object.prototype.valueOf%]]. Perform ! location.[[DefineOwnProperty]](" Perform ! location.[[DefineOwnProperty]](@@toPrimitive, {
[[Value]]: undefined,
[[Writable]]: false,
[[Enumerable]]: false,
[[Configurable]]: false }). Set the value of the [[DefaultProperties]] internal slot of
location to location.[[OwnPropertyKeys]](). Return location. The addition of Returns a Can be set, to navigate to another page. The The Support in all current engines. Support in all current engines. Returns the Can be set, to navigate to the given URL. Support in all current engines. Returns the Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed scheme. Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed host and port. Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed host. Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed port. Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed path. Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed query (ignores leading " Support in all current engines. Returns the Can be set, to navigate to the same URL with a changed fragment (ignores leading " Support in all current engines. Navigates to the given URL. Support in all current engines. Removes the current page from the session history and navigates to the given URL. Support in all current engines. Reloads the current page. Returns a A A A Let output be a new list of strings. Let current be the While current's container document
is non-null: Set current to current's container document. Append the serialization of current's origin to output. Return output. To Let navigable be location's relevant global object's
navigable. Let sourceDocument be the incumbent
global object's associated
If location's relevant Navigate navigable to url using
sourceDocument, with exceptionsEnabled set to true and historyHandling set to historyHandling. The If this's relevant The If this's relevant Parse the given value relative to the entry
settings object. If that failed, throw a " The The If this's relevant The If this's relevant The If this's relevant If this's relevant Let possibleFailure be the result of basic URL
parsing the given value, followed by " Because the URL parser ignores multiple consecutive colons, providing a value
of " If possibleFailure is failure, then throw a
" The If this's relevant If url's host is null, return the empty
string. If url's port is null, return
url's host, serialized. Return url's host, serialized, followed by " The If this's relevant If this's relevant If copyURL has an opaque path, then return. Basic URL parse the given value, with
copyURL as url and host
state as state
override. The If this's relevant Return this's url's host, serialized. The If this's relevant If this's relevant If copyURL has an opaque path, then return. Basic URL parse the given value, with
copyURL as url and hostname
state as state
override. The If this's relevant Return this's url's port, serialized. The If this's relevant If this's relevant If copyURL cannot have a username/password/port, then
return. If the given value is the empty string, then set copyURL's port to null. Otherwise, basic URL parse the given value, with
copyURL as url and port
state as state
override. The If this's relevant The If this's relevant If this's relevant If copyURL has an opaque path, then return. Set copyURL's path to the empty
list. Basic URL parse the given value, with
copyURL as url and path start
state as state
override. The If this's relevant The If this's relevant If this's relevant If the given value is the empty string, set copyURL's query to null.
Otherwise, run these substeps: Let input be the given value with a single leading " Set copyURL's query to the empty
string. Basic URL parse input, with null, the
relevant The If this's relevant The If this's relevant If this's relevant Let input be the given value with a single leading " Set copyURL's fragment to the empty
string. Basic URL parse input, with
copyURL as url and fragment
state as state
override. If copyURL's fragment is
this's url's fragment, then return. This bailout is necessary for compatibility with deployed content, which redundantly sets Unlike the equivalent API for the The If this's relevant If this's relevant The If this's relevant Parse url relative to the entry
settings object. If that failed, throw a " The The Let document be this's relevant
If document is null, then return. If document's origin is not
same origin-domain with the entry settings object's origin, then throw a
" The If this's relevant If this's relevant The details of how the As explained earlier, the Also, every If IsPlatformObjectSameOrigin(this) is true, then return !
OrdinaryGetPrototypeOf(this). Return null. Return ! SetImmutablePrototype(this, V). Return true. Return false. If IsPlatformObjectSameOrigin(this) is true, then: Let desc be OrdinaryGetOwnProperty(this,
P). If the value of the [[DefaultProperties]] internal slot of this
contains P, then set desc.[[Configurable]] to true. Return desc. Let property be CrossOriginGetOwnPropertyHelper(this,
P). If property is not undefined, then return property. Return ? CrossOriginPropertyFallback(P). If IsPlatformObjectSameOrigin(this) is true, then: If the value of the [[DefaultProperties]] internal slot of this
contains P, then return false. Return ? OrdinaryDefineOwnProperty(this, P,
Desc). Throw a " If IsPlatformObjectSameOrigin(this) is true, then return ?
OrdinaryGet(this, P, Receiver). Return ? CrossOriginGet(this, P,
Receiver). If IsPlatformObjectSameOrigin(this) is true, then return ?
OrdinarySet(this, P, V, Receiver). Return ? CrossOriginSet(this, P, V,
Receiver). If IsPlatformObjectSameOrigin(this) is true, then return ?
OrdinaryDelete(this, P). Throw a " If IsPlatformObjectSameOrigin(this) is true, then return
OrdinaryOwnPropertyKeys(this). Return CrossOriginOwnPropertyKeys(this). Support in all current engines. Support in all current engines. Support in all current engines. Returns the number of overall session history
entries for the current traversable navigable. Support in all current engines. Returns the scroll restoration mode of
the active session history entry. Set the scroll restoration mode of the
active session history entry to
value. Support in all current engines. Returns the serialized state of the active session history entry, deserialized into a
JavaScript value. Reloads the current page. Support in all current engines. Goes back or forward the specified number of steps in the overall session history entries list for the current
traversable navigable. A zero delta will reload the current page. If the delta is out of range, does nothing. Support in all current engines. Goes back one step in the overall session history
entries list for the current traversable navigable. If there is no previous page, does nothing. Support in all current engines. Goes forward one step in the overall session
history entries list for the current traversable navigable. If there is no next page, does nothing. Support in all current engines. Adds a new entry into session history with its serialized state set to a serialization of
data. The active history entry's
URL will be copied over and used for the new entry's URL. (The second parameter exists for historical reasons, and cannot be omitted; passing the
empty string is traditional.) Adds a new entry into session history with its serialized state set to a serialization of
data, and with its URL set to url. If the current (The second parameter exists for historical reasons, and cannot be omitted; passing the
empty string is traditional.) Support in all current engines. Updates the serialized state of the active session history entry to a structured clone of
data. (The second parameter exists for historical reasons, and cannot be omitted; passing the
empty string is traditional.) Updates the serialized state of the active session history entry to a structured clone of
data, and its URL to url. If the current (The second parameter exists for historical reasons, and cannot be omitted; passing the
empty string is traditional.) A The Each Each Each Although the index is not directly
exposed, it can be inferred from changes to the length during synchronous navigations. In fact, that is
what it's used for. The If this's relevant global object's associated The If this's relevant global object's associated The If this's relevant global object's associated The If this's relevant global object's associated The The The To delta traverse a Let document be history's relevant global object's
associated If document is not fully active, then throw a
" Traverse the history by a delta given document's node
navigable's traversable navigable,
delta, and document. The The The shared history push/replace state steps, given a Let document be history's associated If document is not fully active, then throw a
" Let serializedData be
StructuredSerializeForStorage(data). Rethrow any exceptions. Let newURL be document's URL. If url is not null, then: Parse url, relative to the relevant
settings object of history. If that fails, then throw a " If document cannot have its URL
rewritten to newURL, then throw a " Run the URL and history update steps given document and
newURL, with serializedData set to
serializedData and historyHandling set to
historyHandling. User agents may limit the number of state objects added to the session history per page. If a
page hits the implementation-defined limit, user agents must remove the entry
immediately after the first entry for that A Let documentURL be document's URL. If targetURL and documentURL differ in their scheme, username,
password, host, or port
components, then return false. If targetURL's scheme is an
HTTP(S) scheme, then return true. (Differences in path, query, and fragment are allowed for If targetURL's scheme is " If targetURL and documentURL differ in their path component or query
components, then return false. (Only differences in fragment are allowed for other types of URLs.) Return true. Note how only the URL of the Consider a game where the user can navigate along a line, such that the user is always at some
coordinate, and such that the user can bookmark the page corresponding to a particular
coordinate, to return to it later. A static page implementing the x=5 position in such a game could look like the following: The problem with such a system is that each time the user clicks, the whole page has to be
reloaded. Here instead is another way of doing it, using script: In systems without script, this still works like the previous example. However, users that
do have script support can now navigate much faster, since there is no network access
for the same experience. Furthermore, contrary to the experience the user would have with just a
naïve script-based approach, bookmarking and navigating the session history still work. In the example above, the data argument to the Most applications want to use the same scroll restoration mode value for all of
their history entries. To achieve this they can set the Support in all current engines. Support in all current engines. Support in all current engines. Returns a copy of the information that was provided to The HashChangeEvent/HashChangeEvent Support in all current engines. Support in all current engines. Support in all current engines. Returns the URL of the session history entry that was previously
current. Support in all current engines. Returns the URL of the session history entry that is now
current. The The PageTransitionEvent/PageTransitionEvent Support in all current engines. Support in all current engines. Support in all current engines. For the For the Things that can cause the page to be unsalvageable include: The To fire a page transition event named eventName at a The values for Support in all current engines. There are no The The This attribute is a SecurityError" 7.2.1.2 Shared internal slot: [[CrossOriginPropertyDescriptorMap]]
Window and Location objects both have a
[[CrossOriginPropertyDescriptorMap]] internal slot, whose value is initially an empty
map.Window or
Location object from objectGlobal. It is filled lazily by
CrossOriginGetOwnPropertyHelper, which consults it on future lookups.const href =
Object.getOwnPropertyDescriptor(crossOriginLocation, "href").set the value and its
corresponding key in the map cannot be garbage collected as that would be observable.document.domain is set. This is not observable as document.domain cannot revisit an earlier value.document.domain
to "example.com" on www.example.com means user agents can remove all
key-value pairs from the map where part of the key is www.example.com, as that can never be part
of the origin again and therefore the corresponding value could never be retrieved
from the map.7.2.1.3 Shared abstract operations
7.2.1.3.1 CrossOriginProperties ( O )
Location object, then return «
{ [[Property]]: "href", [[NeedsGet]]: false, [[NeedsSet]]: true },
{ [[Property]]: "replace" } ».window", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "self", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "location", [[NeedsGet]]: true, [[NeedsSet]]: true },
{ [[Property]]: "close" },
{ [[Property]]: "closed", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "focus" },
{ [[Property]]: "blur" },
{ [[Property]]: "frames", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "length", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "top", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "opener", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "parent", [[NeedsGet]]: true, [[NeedsSet]]: false },
{ [[Property]]: "postMessage" } ».WindowProxy object.window", "self", "location", "close", "closed",
"focus", "blur", "frames",
"length", "top", "opener",
"parent", "postMessage", or an array index
property name.7.2.1.3.2 CrossOriginPropertyFallback ( P )
then", @@toStringTag,
@@hasInstance, or @@isConcatSpreadable, then return
PropertyDescriptor{
[[Value]]: undefined,
[[Writable]]: false,
[[Enumerable]]: false,
[[Configurable]]: true }.SecurityError" 7.2.1.3.3 IsPlatformObjectSameOrigin ( O )
w.document, this
step is invoked before the document getter is reached as part
of the [[Get]] algorithm for the WindowProxy
w.7.2.1.3.4 CrossOriginGetOwnPropertyHelper ( O, P )
SecurityError" CrossOriginPropertyFallback.7.2.1.3.5 CrossOriginGet ( O, P, Receiver )
SecurityError"
Call(getter, Receiver).7.2.1.3.6 CrossOriginSet ( O, P, V,
Receiver )
SecurityError" 7.2.1.3.7 CrossOriginOwnPropertyKeys ( O )
then",
@@toStringTag, @@hasInstance, @@isConcatSpreadable
».7.2.2 The
Window objectFirefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android37+Samsung Internet?Opera Android10.1+[window.windowFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.framesFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.selfFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.documentFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Document associated with window.document.defaultViewFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer9+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Window associated with document, if there is one, or null otherwise.Window object has an associated
Document, which is a Document object. It is set when the
Window object is created, and only ever changed during navigation from the initial
about:blank Document.Window's browsing context is
its associated Document's browsing context. It is either null or a
browsing context.Window's navigable is
the navigable whose active document is the
Window's associated
Document's, or null if there is no such navigable.window, frames, and self getter steps are to return this's relevant realm.[[GlobalEnv]].[[GlobalThisValue]].document getter steps
are to return this's associated
Document.Document object associated with a Window object can
change in exactly one case: when the navigate algorithm creates a new Document object for the
first page loaded in a browsing context. In that specific case, the
Window object of the initial
about:blank page is reused and gets a new Document object.defaultView getter steps are:WindowProxy object.
Firefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Window objects must also have a writable, configurable,
non-enumerable property named HTMLDocument whose value is the
Document interface object.7.2.2.1 Opening and closing windows
window = window.open([ url [, target [, features ] ] ])Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+about:blank"), and returns
it. target (defaults to "_blank") gives the name of the new
window. If a window already exists with that name, it is reused. The features
argument can contain a set of comma-separated tokens:noopener"noreferrer"noopener and noreferrer link types on hyperlinks.popup"visible getter on all
BarProp objects as well.)globalThiswindow.name [ = value ]Firefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.close()Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+window.closedFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.stop()Firefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)14+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Document._blank".noopener"] exists, then:noopener"] as a boolean
feature.noopener"].noreferrer"] exists, then:noreferrer"] as a boolean
feature.noreferrer"].no-referrer".onclick handler uses the window.open() API to open a page in an iframe element,
the user agent could override the selection of the target browsing context to instead target a
new tab.new and unrestricted" or "new with no opener", then:about:blank.SyntaxError"
If urlRecord matches about:blank, then perform the
URL and history update steps given targetNavigable's active document and urlRecord.about:blank?foo. If url is just plain about:blank, this will do nothing.about:blank.SyntaxError" Navigate targetNavigable to
urlRecord using sourceDocument, with referrerPolicy set to referrerPolicy and
exceptionsEnabled set to true.new with no
opener", then return null.WindowProxy.open(url, target,
features) method steps are to run the window open steps with
url, target, and features.
popup"] exists, then return the result of parsing
tokenizedFeatures["popup"] as a boolean
feature.location", and false.toolbar", and false.menubar", and false.resizable", and true.scrollbars", and false.status", and false.screenx"
left".
screeny"
top".
innerwidth"
width".
innerheight"
height".
yes", then return
true.true", then return
true.
name getter steps are:name setter steps are:
close() method steps
are:Window that does not
correspond to a top-level traversable, and so closing is not allowed.closed getter
steps are to return true if this's browsing context
is null or its is closing is true; otherwise false.stop() method steps
are:7.2.2.2 Indexed access on the
Window objectwindow.lengthFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window[index]WindowProxy corresponding to the indicated document-tree child navigables.length getter steps are
to return this's associated
Document's document-tree child navigables's size.WindowProxy object.7.2.2.3 Named access on the
Window objectwindow[name]document.getElementById() or document.querySelector().Window object window is the
return value of running these steps:Document.
https://example.org/, assuming https://elsewhere.example/
sets window.name to "spices", evaluating
window.spices after everything has loaded will yield undefined:Window object supports named
properties. The supported property names of a Window object
window at any moment consist of the following, in tree order according to
the element that contributed them, ignoring later duplicates:name content attribute for all embed,
form, img, and object elements that
have a non-empty name content attribute and are in a document
tree with window's associated
Document as their root; andid content attribute for all HTML
elements that have a non-empty id content attribute and are
in a document tree with window's associated Document as their
root.Window object window, the user agent must return the
value obtained using the following steps:Document's descendants whose
content navigable is in objects.WindowProxy.window's associated Document, whose filter matches
only named objects of window with
the name name. (By definition, these will all be elements.)Window object
window with the name name, for the purposes of the above algorithm, consist
of the following:Document whose target name is name;embed, form, img, or
object elements that have a name content attribute whose
value is name and are in a document tree with window's associated Document as their
root; andid content attribute
whose value is name and are in a document tree with window's
associated Document as their
root.Window interface has the named properties objects rather than legacy platform objects.7.2.2.4 Accessing related windows
window.topFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android4+Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+WindowProxy for the top-level traversable.window.opener [ = value ]Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer9+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+WindowProxy for the opener browsing context.window.parentFirefox1+Safari1.3+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer9+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+WindowProxy for the parent
navigable.window.frameElementFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer5.5+
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+top getter steps are:WindowProxy.opener getter steps
are:WindowProxy object.opener setter steps are:opener", {
[[Value]]: the given value, [[Writable]]: true, [[Enumerable]]: true, [[Configurable]]: true
}).
window.opener to null clears the opener
browsing context reference. In practice, this prevents future scripts from accessing their
opener browsing context's Window object.Window object through the window.opener getter.
E.g., a script can set window.opener.location, causing the opener
browsing context to navigate.parent getter steps
are:WindowProxy.frameElement
getter steps are:
iframeWindow
was nulled out when element was
removed from the document.7.2.2.5 Historical browser interface element APIs
Window interface had some properties that represented
the visibility of certain web browser interface elements.Window's browsing context's
is popup property is true or false.BarProp object:Firefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android37+Samsung Internet?Opera Android?[window.locationbar.visibleFirefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android?window.menubar.visibleFirefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android?window.personalbar.visibleFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.scrollbars.visibleFirefox1+Safari3+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+window.statusbar.visibleFirefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android?window.toolbar.visibleFirefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android?Window is not a popup; otherwise, returns false.Firefox1+Safari3+Chrome1+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS1+Chrome Android?WebView Android37+Samsung Internet?Opera Android?visible getter
steps are:BarProp objects must exist for each Window object:BarProp objectBarProp objectBarProp objectBarProp objectBarProp objectBarProp objectlocationbar
attribute must return the location bar BarProp object.menubar
attribute must return the menu bar BarProp object.personalbar
attribute must return the personal bar BarProp object.scrollbars
attribute must return the scrollbar BarProp object.statusbar
attribute must return the status bar BarProp object.toolbar
attribute must return the toolbar BarProp object.
status attribute on the Window object must,
on getting, return the last string it was set to, and on setting, must set itself to the new
value. When the Window object is created, the attribute must be set to the empty
string. It does not do anything else.7.2.2.6 Script settings for
Window objectsDocument.Document.Document.Document.Document.concrete", andDocument is allowed to use the "cross-origin-isolated" feature.Document's load timing info's navigation start
time.7.2.3 The
WindowProxy exotic objectWindowProxy is an exotic object that wraps a
Window ordinary object, indirecting most operations through to the wrapped object.
Each browsing context has an associated WindowProxy object. When the
browsing context is navigated, the Window
object wrapped by the browsing context's associated WindowProxy object
is changed.WindowProxy exotic object must use the ordinary internal methods except where
it is explicitly specified otherwise below.WindowProxy interface object.WindowProxy object has a [[Window]] internal slot representing the wrapped Window object.WindowProxy is named as a "proxy", it does not do
polymorphic dispatch on its target's internal methods as a real proxy would, due to a desire to
reuse machinery between WindowProxy and Location objects. As long as the
Window object remains an ordinary object this is unobservable and can be implemented
either way.7.2.3.1 [[GetPrototypeOf]] ( )
7.2.3.2 [[SetPrototypeOf]] ( V )
7.2.3.3 [[IsExtensible]] ( )
7.2.3.4 [[PreventExtensions]] ( )
7.2.3.5 [[GetOwnProperty]] ( P )
Document.Document earlier than
navigableB's container was.WindowProxy.WindowProxy of the named
object of W with the name P.7.2.3.6 [[DefineOwnProperty]] ( P, Desc
)
SecurityError" 7.2.3.7 [[Get]] ( P, Receiver )
7.2.3.8 [[Set]] ( P, V, Receiver )
7.2.3.9 [[Delete]] ( P )
SecurityError" 7.2.3.10 [[OwnPropertyKeys]] ( )
Document's document-tree
child navigables's size.7.2.4 The
Location interfaceFirefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android37+Samsung Internet?Opera Android10.1+Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+Window object is associated with a unique instance of a Location
object, allocated when the Window object is created.Location exotic object is defined through a mishmash of IDL,
invocation of JavaScript internal methods post-creation, and overridden JavaScript internal
methods. Coupled with its scary security policy, please take extra care while implementing
this excrescence.Location object, run these steps:Location platform
object.valueOf", {
[[Value]]: valueOf,
[[Writable]]: false,
[[Enumerable]]: false,
[[Configurable]]: false }).valueOf and @@toPrimitive own
data properties, as well as the fact that all of Location's IDL attributes are marked
[LegacyUnforgeable], is required by legacy code that consulted
the Location interface, or stringified it, to determine the document URL, and then used it in a security-sensitive way.
In particular, the valueOf, @@toPrimitive, and [LegacyUnforgeable] stringifier mitigations ensure that code such as
foo[location] = bar or location + "" cannot be
misdirected.document.location [ = value ]window.location [ = value ]Location object with the current page's location.Document object's location getter steps are to return
this's relevant global object's Location object, if
this is fully active, and null otherwise.Window object's location getter steps are to return this's
Location object.Location objects provide a representation of the URL of their associated Document, as well as
methods for navigating and reloading
the associated navigable.[location.toString()location.hrefFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Firefox22+Safari1+Chrome52+
Opera?Edge79+
Edge (Legacy)12+Internet Explorer11
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?Location object's URL.location.originFirefox21+Safari5.1+Chrome8+
Opera?Edge79+
Edge (Legacy)12+Internet Explorer11
Firefox Android?Safari iOS?Chrome Android?WebView Android3+Samsung Internet?Opera Android?Location object's URL's origin.location.protocolFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's scheme.location.hostFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's host and port (if different from the default
port for the scheme).location.hostnameFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's host.location.portFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's port.location.pathnameFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's path.location.searchFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's query (includes leading "?" if non-empty).?").location.hashFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer3+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+Location object's URL's fragment (includes leading "#" if non-empty).#").location.assign(url)Firefox1+Safari3+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer5.5+
Firefox Android?Safari iOS1+Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+location.replace(url)Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer5.5+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+location.reload()Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer5.5+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+location.ancestorOriginsFirefoxNoSafari6+Chrome20+
Opera?Edge79+
Edge (Legacy)?Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?DOMStringList object listing the origins of the ancestor navigables' active documents.Location object has an associated relevant Document,
which is its relevant global object's browsing context's active document, if this
Location object's relevant global object's browsing context is non-null, and null otherwise.Location object has an associated url,
which is this Location object's relevant Document's URL, if this Location object's relevant
Document is non-null, and about:blank otherwise.Location object has an associated ancestor origins list. When a
Location object is created, its ancestor origins list must be set to a
DOMStringList object whose associated list is the list of strings that
the following steps would produce:Location object's relevant
Document.Location-object navigate a Location object
location to a URL url, optionally given a history
handling behavior historyHandling (default "push"):Document.Document is not yet
completely loaded, and the incumbent global
object does not have transient activation, then set
historyHandling to "replace".href getter
steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url, serialized.href setter steps are:Document is null, then
return.SyntaxError"
Location-object navigate this to the
resulting URL record.href setter intentionally has no
security check.origin
getter steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" serialization of
this's url's origin.protocol
getter steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url's scheme, followed by ":".protocol setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.:", with copyURL
as url and scheme start state as
state override.https:" (or even "https::::") is the same as
providing a value of "https".SyntaxError" copyURL's scheme is not an
HTTP(S) scheme, then terminate these steps.Location-object navigate this to
copyURL.host getter
steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" url be this's url.:" and url's port, serialized.host setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.Location-object navigate this to
copyURL.hostname
getter steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url's host is null, return the empty string.hostname setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.Location-object navigate this to
copyURL.port getter
steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url's port is null, return the empty string.port setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.Location-object navigate this to
copyURL.pathname
getter steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" URL path serializing this
Location object's url.pathname setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.Location-object navigate this to
copyURL.search
getter steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url's query is either null or the empty string, return the empty
string.search setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.?" removed, if any.Document's document's character encoding,
copyURL as url, and query
state as state
override.Location-object navigate this to
copyURL.hash getter
steps are:Document is non-null and its
origin is not same origin-domain with
the entry settings object's origin, then throw a
"SecurityError" this's url's fragment is either null or the empty string, return the
empty string.hash setter steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" copyURL be a copy of this's url.#"
removed, if any.location.hash on scroll. It does not apply to other
mechanisms of fragment navigation, such as the location.href setter or location.assign().Location-object navigate this to
copyURL.a and area elements,
the hash setter does not special case the empty string, to
remain compatible with deployed scripts.
assign(url) method steps are:Document is null, then
return.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" Parse url relative to the entry
settings object. If that failed, throw a "SyntaxError"
Location-object navigate this to the
resulting URL record.replace(url) method steps are:Document is null, then
return.SyntaxError"
Location-object navigate this to the
resulting URL record given "replace".replace() method intentionally has
no security check.reload() method
steps are:Document.SecurityError" Reload document's node navigable.
ancestorOrigins getter steps are:Document is null, then return
an empty list.Document's origin is not same origin-domain with the
entry settings object's origin, then throw a
"SecurityError" this's ancestor origins list.ancestorOrigins attribute works are still
controversial and might change. See issue
#1918 for more information.
Location exotic object
requires additional logic beyond IDL for security purposes. The Location object must
use the ordinary internal methods except where it is explicitly specified otherwise below.Location object has a [[DefaultProperties]] internal slot
representing its own properties at time of its creation.7.2.4.1 [[GetPrototypeOf]] ( )
7.2.4.2 [[SetPrototypeOf]] ( V )
7.2.4.3 [[IsExtensible]] ( )
7.2.4.4 [[PreventExtensions]] ( )
7.2.4.5 [[GetOwnProperty]] ( P )
7.2.4.6 [[DefineOwnProperty]] ( P, Desc )
SecurityError" 7.2.4.7 [[Get]] ( P, Receiver )
7.2.4.8 [[Set]] ( P, V, Receiver )
7.2.4.9 [[Delete]] ( P )
SecurityError" 7.2.4.10 [[OwnPropertyKeys]] ( )
7.2.5 The
History interfaceFirefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+Firefox1+Safari1+Chrome1+
Opera3+Edge79+
Edge (Legacy)12+Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android10.1+history.lengthFirefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+history.scrollRestorationFirefox46+Safari11+Chrome46+
Opera?Edge79+
Edge (Legacy)?Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?history.scrollRestoration = valuehistory.stateFirefox4+Safari6+Chrome19+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+history.go()history.go(delta)Firefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+history.back()Firefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+history.forward()Firefox1+Safari1+Chrome1+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+history.pushState(data, "")Firefox4+Safari5+Chrome5+
Opera11.5+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS4+Chrome Android?WebView Android37+Samsung Internet?Opera Android11.5+history.pushState(data, "", url)Document cannot have
its URL rewritten to url, a "SecurityError"
history.replaceState(data, "")Firefox4+Safari5+Chrome5+
Opera11.5+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS4+Chrome Android?WebView Android37+Samsung Internet?Opera Android11.5+history.replaceState(data, "", url)Document cannot have
its URL rewritten to url, a "SecurityError"
Document has a history object, a
History object.history getter steps
are to return this's associated
Document's history object.
History object has state,
initially null.History object has a length, a
non-negative integer, initially 0.History object has an index, a
non-negative integer, initially 0.length getter
steps are:Document is not fully
active, then throw a "SecurityError"
this's length.scrollRestoration getter steps are:Document is not fully
active, then throw a "SecurityError"
this's node navigable's active session history entry's scroll restoration mode.scrollRestoration setter steps
are:Document is not fully
active, then throw a "SecurityError"
this's node navigable's active session history entry's scroll restoration mode to the given value.state getter
steps are:Document is not fully
active, then throw a "SecurityError"
this's state.go(delta)
method steps are to delta traverse this given delta.back() method steps
are to delta traverse this given −1.forward() method
steps are to delta traverse this given +1.History object history given an integer
delta:Document.SecurityError" delta is 0, then reload document's node
navigable.pushState(data,
unused, url) method steps are to run the shared history
push/replace state steps given this, data, url, and
"push".replaceState(data, unused,
url) method steps are to run the shared history push/replace state
steps given this, data, url, and "replace".History
history, a value data, a scalar value string-or-null
url, and a history handling behavior historyHandling, are:Document.SecurityError" SecurityError"
newURL to the resulting URL record.SecurityError"
Document object in the session history
after having added the new entry. (Thus the state history acts as a FIFO buffer for eviction, but
as a LIFO buffer for navigation.)Document document can have its URL rewritten to a
URL targetURL if the following algorithm returns true:http: and https: URLs.)file", and targetURL and documentURL differ in their
path component, then return false. (Differences in query and fragment
are allowed for file: URLs.)
document's URL
targetURL
can have its URL rewritten
https://example.com/home
https://example.com/home#about
✅
https://example.com/home
https://example.com/home?page=shop
✅
https://example.com/home
https://example.com/shop
✅
https://example.com/home
https://user:[email protected]/home
❌
https://example.com/home
http://example.com/home
❌
file:///path/to/x
file:///path/to/x#hash
✅
file:///path/to/x
file:///path/to/x?search
✅
file:///path/to/x
file:///path/to/y
❌
about:blank
about:blank#hash
✅
about:blank
about:blank?search
❌
about:blank
about:srcdoc
❌
data:text/html,foo
data:text/html,foo#hash
✅
data:text/html,foo
data:text/html,foo?search
❌
data:text/html,foo
data:text/html,bar
❌
data:text/html,foo
data:bar
❌
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43#hash
✅
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43?search
❌
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43
blob:https://example.com/anything
❌
blob:https://example.com/77becafe-657b-4fdc-8bd3-e83aaa5e8f43
blob:path
❌
Document
matters, and not its origin. They can mismatch in
cases like about:blank Documents with inherited origins, in sandboxed
iframes, or when the document.domain
setter has been used.
pushState() method is the same information as would be sent
to the server, but in a more convenient form, so that the script doesn't have to parse the URL
each time the user navigates.
scrollRestoration attribute as soon as possible
(e.g., in the first script element in the document's head element) to
ensure that any entry added to the history session gets the desired scroll restoration mode.7.2.6 Event interfaces
7.2.6.1 The
PopStateEvent interfaceFirefox11+Safari6+Chrome16+
Opera?Edge79+
Edge (Legacy)14+Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?Firefox4+Safari6+Chrome4+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+[event.stateFirefox4+Safari6+Chrome4+
Opera12.1+Edge79+
Edge (Legacy)12+Internet Explorer10+
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+pushState() or replaceState().state attribute must return the value it was
initialized to. It represents the context information for the event, or null, if the state
represented is the initial state of the Document.7.2.6.2 The
HashChangeEvent interfaceFirefox11+Safari6+Chrome16+
Opera?Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?Firefox3.6+Safari5+Chrome8+
Opera10.6+Edge79+
Edge (Legacy)12+Internet Explorer8+
Firefox Android?Safari iOS5+Chrome Android?WebView Android?Samsung Internet?Opera Android11+[event.oldURLFirefox6+Safari5.1+Chrome8+
Opera12.1+Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+event.newURLFirefox6+Safari5.1+Chrome8+
Opera12.1+Edge79+
Edge (Legacy)12+Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android12.1+oldURL attribute must return the value it was
initialized to. It represents context information for the event, specifically the URL of the
session history entry that was traversed from.newURL attribute must return the value it was
initialized to. It represents context information for the event, specifically the URL of the
session history entry that was traversed to.7.2.6.3 The
PageTransitionEvent interfaceFirefox11+Safari6+Chrome16+
Opera?Edge79+
Edge (Legacy)?Internet ExplorerNo
Firefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android?Firefox1.5+Safari5+Chrome4+
Opera?Edge79+
Edge (Legacy)12+Internet Explorer11
Firefox Android?Safari iOS4+Chrome Android?WebView Android37+Samsung Internet?Opera Android?[event.persistedFirefox11+Safari5+Chrome4+
Opera?Edge79+
Edge (Legacy)12+Internet Explorer11
Firefox Android?Safari iOS4+Chrome Android?WebView Android37+Samsung Internet?Opera Android?pageshow event, returns false if the page is
newly being loaded (and the load event will fire). Otherwise,
returns true.pagehide event, returns false if the page is
going away for the last time. Otherwise, returns true, meaning that the page might be reused if
the user navigates back to this page (if the Document's salvageable state stays true). Document alive in a session
history entry after unloadiframes that are not salvageableAborting a Documentpersisted attribute must return the value
it was initialized to. It represents the context information for the event.Window
window with a boolean persisted, fire
an event named eventName at window, using
PageTransitionEvent, with the persisted attribute initialized to
persisted, the legacy target override flag set.Window object. They are set to true
for historical reasons.7.2.6.4 The
BeforeUnloadEvent interfaceFirefox1.5+Safari7+Chrome30+
Opera?Edge79+
Edge (Legacy)?Internet Explorer4+
Firefox Android?Safari iOS?Chrome Android?WebView Android37+Samsung Internet3.0+Opera Android?[BeforeUnloadEvent-specific initialization methods.BeforeUnloadEvent interface is a legacy interface which allows checking
if unloading is user-canceled to be controlled not only by canceling the event, but by
setting the returnValue attribute to a
value besides the empty string. Authors should use the method, or other means of canceling
events, instead of using returnValue.returnValue attribute controls the
process of checking if unloading is user-canceled. When the event is created, the
attribute must be set to the empty string. On getting, it must return the last value it was set
to. On setting, the attribute must be set to the new value.DOMString only for historical reasons.
Any value besides the empty string will be treated as a request to ask the user for
confirmation.