open window using javascript disable address bar

In addition to informative Solutions 1 and 2, I would add my advice:

Your design pop-ups the new window (or possibly a new tab). Such pop-ups often irritates the users; first of all, because the abuse of many advertisers' pop-ups, but also because they are pretty inconvenient in general. Therefore, many users block such pop-ups, usually using some browsers' plug-ins. Your work will look much better is you simulate the modal behavior you need using on-page modal dialog, like the one found in jQuery UI: http://jqueryui.com/dialog[^].

There are many 3rd party plug-ins offering good number of useful effects, such as dimming of the rest of the page, and a lot more. Please see: http://bit.ly/1EKp8je[^].

—SA

1. Put the options around quotes, like this:
   
   JavaScript

   window.open('/login.html', 'winname',"directories=0,titlebar=0,toolbar=0,location=0,status=0,menubar=0,scrollbars=no,resizable=no,width=400,height=350");

   
   
2. As Kornfeld Eliyahu Peter already mentioned in his answer, dom.disable_window_open_feature.location now defaults to true, to force the location bar to be there.
   
   If you want to change that, go to about:config and set it to false.