Cannot navigate to link in Google embedded map

Once you’ve done the above, delete everything above this line.

Steps to reproduce

  1. Make a new note
  2. Enter the following:
<iframe src="https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d14549.395249571353!2d139.77239811203546!3d35.68907160554928!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x60188c019a160dbd%3A0x5db48e4e41b360ec!2sKanda%20Station!5e0!3m2!1sen!2snl!4v1699969555215!5m2!1sen!2snl" width="100%" height="450" style="border:0;" allowfullscreen="" loading="lazy" referrerpolicy="no-referrer-when-downgrade"></iframe>
  1. Switch to reading mode
  2. Try clicking the link “View larger map”

Did you follow the troubleshooting guide? [Y]

Expected result

Link is opened in the default browser.

Actual result

Nothing. Link is only opened using Shift+click, but you can’t do that on mobile.

Environment

For desktop:

SYSTEM INFO:
	Obsidian version: v1.4.16
	Installer version: v1.4.16
	Operating system: Windows 10 Pro 10.0.19045
	Login status: not logged in
	Insider build toggle: off
	Live preview: off
	Legacy editor: off
	Base theme: dark
	Community theme: none
	Snippets enabled: 0
	Restricted mode: off
	Plugins installed: 3
	Plugins enabled: 3
		1: Self-hosted LiveSync v0.19.23
		2: Calendar v1.5.10
		3: Periodic Notes v0.0.17

RECOMMENDATIONS:
	Community plugins: for bugs, please first try updating all your plugins to latest. If still not fixed, please try to make the issue happen in the Sandbox Vault or disable community plugins.

For mobile:

SYSTEM INFO:
	Operating system: android 13 (Sony XQ-CQ54)
	Obsidian version: 1.4.16 (114)
	API version: v1.4.16
	Login status: not logged in
	Live preview: on
	Legacy editor: off
	Base theme: dark
	Community theme: none
	Snippets enabled: 0
	Restricted mode: off
	Plugins installed: 1
	Plugins enabled: 1
		1: Self-hosted LiveSync v0.19.20
RECOMMENDATIONS:
	Community plugins: for bugs, please first try updating all your plugins to latest. If still not fixed, please try to make the issue happen in the Sandbox Vault or disable community plugins.

Additional information

This problem is the worst on mobile, because the link does absolutely nothing there. There is no shift key to hold while tapping it, and long-tap doesn’t give the option to open in the browser either.

I suspect this behaviour occurs for any link in any embedded iframe, but this Google map is just where I noticed it, and where I know it’s 100% reproducible.

This is not a bug. That iframe is trying to open a popup and we don’t allow it for security reasons.

So you could catch that and open it in a new browser tab, like opening any other url from any other application.

Also I’d like to know what those security reasons are. I’m very curious why a link in an iframe is considered insecure, even though it’s my iframe (or it could be), in my document, in my vault, in my obsidian install, on my computer :man_shrugging:t2: