Closed
Bug 57414
Opened 24 years ago
Closed 24 years ago
data: page can't window.open and then document.write twice
Categories
(Core :: Security, defect, P3)
Tracking
()
VERIFIED
FIXED
mozilla0.9.1
People
(Reporter: jruderman, Assigned: security-bugs)
References
Details
Steps to reproduce:
1. Run Mozilla with -console to see error messages
2. Load data:text/html,quux
3. Type into urlbar: javascript:with(window.open("about:blank").document){write
("foo"); write("bar");}
The code works fine at http urls, file urls, and about:blank, but at
data:text/html urls, the second write() fails with
NS_ERROR_DOM_PROP_ACCESS_DENIED. I get the same results using the script as a
url in the urlbar, as a personal toolbar bookmarklet, as a javascript: link in
the data page, or as a <script> in the data page.
This equivalent code will fail under the same circumstances and may be easier
to use for debugging:
javascript:x=window.open("about:blank").document;x.write("foo");x.write("bar");
I noticed the problem while using the DOM property tree bookmarklet at
http://www.cs.hmc.edu/~jruderma/mozilla/proptree/ as a personal toolbar link.
Reporter | ||
Comment 1•24 years ago
|
||
Same thing happens when you start at a javascript: url instead of a
data:text/html url (for example, javascript:4).
Updated•24 years ago
|
QA Contact: czhang → junruh
Assignee | ||
Comment 3•24 years ago
|
||
Mass changing milestones to Moz0.9.1. Many of these bugs are dependent on the
XPConnected DOM and its associated security UI changes.
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9.1
Assignee | ||
Comment 4•24 years ago
|
||
I can't reproduce this anymore, so I guess it's fixed.
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → FIXED
Comment 6•23 years ago
|
||
Marking VERIFIED FIXED on:
-MacOS91 2001-06-01-08-trunk
-Win98SE 2001-06-01-06-trunk
-LinRH62 2001-06-01-08-trunk
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•