Popup windows launched in a new window in ChromeFrame on IE8 would open behin...

chrome_frame/chrome_frame_activex_base.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_
 #define CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_
 
 #include <atlbase.h>
 #include <atlcom.h>
 #include <atlctl.h>
@@ skipping 488 matching lines @@
     // to which the host is directed.  It is only used as a temporary message
     // passing mechanism between this CF instance, and the BHO that will
     // be constructed in the new IE tab.
     if (parsed_url.SchemeIs("chrome-extension") &&
         is_privileged_) {
       scheme = "http";
       host = "local_host";
     }
 
     std::string url = base::StringPrintf(
-        "%hs:%hs?attach_external_tab&%I64u&%d&%d&%d&%d&%d&%hs",
+        "%hs://%hs?attach_external_tab&%I64u&%d&%d&%d&%d&%d&%hs",

[amit, 2010/11/09 22:47:54]

Looks like this will convert gcf:attach... to gcf://attach... is this intended,
related to other changes?

         scheme.c_str(),
         host.c_str(),
         params.cookie,
         params.disposition,
         params.dimensions.x(),
         params.dimensions.y(),
         params.dimensions.width(),
         params.dimensions.height(),
         params.profile_name.c_str());
     HostNavigate(GURL(url), GURL(), params.disposition);
@@ skipping 753 matching lines @@
   EventHandlers onextensionready_;
 
   // Handle network requests when host network stack is used. Passed to the
   // automation client on initialization.
   scoped_ptr<UrlmonUrlRequestManager> url_fetcher_;
 
   HINSTANCE prev_resource_instance_;
 };
 
 #endif  // CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_