Open Bug 631853 Opened 14 years ago Updated 2 years ago

No error page (blank page) shown when a site sends the header X-FRAME-OPTIONS: DENY

Categories

(Core :: DOM: Core & HTML, enhancement)

enhancement

Tracking

()

Tracking Status
firefox39 --- affected
firefox40 --- affected
firefox41 --- affected
firefox42 --- affected

People

(Reporter: eduacostam, Unassigned)

References

(Blocks 1 open bug, )

Details

Attachments

(2 files)

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b12pre) Gecko/20110205 Firefox/4.0b12pre Build Identifier: When opening a website that includes another in a frame and this second one does not allows being shown within a frame, instead of showing a message to the user explaining why there's no content and a link to open the website in another tab, it shows nothing. Reproducible: Always Steps to Reproduce: 1. Go to http://www.reddit.com/tb/fftxq 2. 3. Actual Results: Toolbar on top, white space on bottom Expected Results: Toolbar on top, message like Opera's: Error http://www.youtube.com/watch?v=3Ua10Jas7ak The website does not permit its content to be displayed in a frame. It must be displayed in a separate window. Load document in a new window
Attached image Actual result (deleted) —
Attached image Expected result (deleted) —
Reporter -> Are you still experiencing this issue with the latest version of Firefox 6? Does the issue occur with the latest nightly? http://nightly.mozilla.org/
I get the same "actual result" in Firefox 3.6 through the latest Nightly, Safari and with the latest Chrome. IE 8 and Opera show the expected result. This might be an RFE to generate an error page instead of a blank page when a site uses the X-FRAME-OPTIONS: DENY header.
Hardware: x86 → All
Summary: Nothing shown instead of message when website does not permit its content to be displayed in a frame → No error page (blank page) shown when a site sends the header X-FRAME-OPTIONS: DENY
Version: unspecified → Trunk
This would at least make it clear what's going on.
Severity: normal → enhancement
Status: UNCONFIRMED → NEW
Component: General → DOM
Ever confirmed: true
QA Contact: general → general
Note that at this point IE is the only browser that does an error page for X-frame-options. Presumably this needs to be covered by a specification, since the difference between about:blank and error pages is black-box detectable by the parent page....
Blocks: 479922
Blocks: 1191512
This bug bite me on Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:42.0) Gecko/20100101 Firefox/42.0 ID:20150806103224 CSet: 2fad09a0540d when visiting https://moz-test-page.herokuapp.com/
Component: DOM → DOM: Core & HTML
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: