-
Notifications
You must be signed in to change notification settings - Fork 199
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions) #335
Comments
Update, resolution is as follows:
default values:
|
Update better detection Detection:
|
Sorry it took a while to come around to this. Testing with macOS 14.5 and the profile installed and testing your website. It is blocking popups for me. Now once the profile was installed I had to restart Safari. But that's typical of a lot of applications when a configuration profile is applied. Are you still seeing undesired behavior? |
CIS has updated the guidance for this rule and moved it to a manual audit. Scine the config profile does not work, we ahve removed the rule from the Sequoia branch and will backport to others. |
Summary
The current remediations for blocking popups in Safari is no longer applied via config profile. This is verified by navigateing to https://nsc.puresafety.com/Login/PopupTest with the profile insatlled enforing safariAllowPopups.
Steps to reproduce
Go to Safari > Settings > Websites > Pop-up Windows
Change When visiting other websites: Allow
Quit Safari
Install Config profile recomemnded here with com.apple.Safari - safariAllowPopups payload
Open Safari
Navigate to https://nsc.puresafety.com/Login/PopupTest
Toggle Change When visiting other websites: to various settings
quit
re-open https://nsc.puresafety.com/Login/PopupTest to observe various results.
Operating System version
macOS Sonoma
Intel or Apple Silicon
Both
What is the current bug behavior?
Popups are not blocked
What is the expected correct behavior?
Popups blocked
Possible fixes
So far I've found that pop up blocking is no longer a binary yes/no decision and is a per site with a "All others" setting. This is stored in a sqlite database.
Verifying the seting is done via
sqlite3 ~/Library/Safari/PerSitePreferences.db 'select * from default_preferences' | grep PerSitePreferencesPopUpWindow
There are now 3 options: block, block and notify and allow.
Per site settings can be overridden in the same database by the user and can be reported via
sqlite3 ~/Library/Safari/PerSitePreferences.db 'select * from preference_values' | grep PerSitePreferencesPopUpWindow
The text was updated successfully, but these errors were encountered: