Closed Bug 92847 Opened 24 years ago Closed 24 years ago

Should be able to change location of another frame cross-origin

Categories

(Core :: Security, defect, P2)

x86
Windows 98
defect

Tracking

()

VERIFIED DUPLICATE of bug 52920
mozilla0.9.4

People

(Reporter: sicoffey, Assigned: security-bugs)

References

()

Details

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2+) Gecko/20010713
BuildID:    2001071304

This is a new online shopping site, one of the biggest UK chains.

It uses Javascript for a 'postcode lookup' to identify delivery areas. With
Mozilla this fails, Javascipt console shows 
Error: uncaught exception: Permission denied to access property

I'm guessing this is an Evangelism issue rather than a true Moz bug, but I could
be wrong. 

Reproducible: Always
Steps to Reproduce:
1. Go to the URL above
2. Enter a postcode eg. RG1 2PY  and click the envelope icon


Actual Results:  Quick flash of the Javascipt call in the status bar, but no action

Expected Results:  Should display new page with delivery details - works with IE/NN4
-> Security and confirming
Assignee: bclary → mstoltz
Status: UNCONFIRMED → NEW
Component: Evangelism → Security: General
Ever confirmed: true
QA Contact: zach → ckritzer
Site seems to be calling location.replace on a different child of the parent,
but this should work...

Site is also using document.all, but that's a separate bug that should be filed
on  evangelism, I would say.
Yeah, you should be able to do location.replace on a sibling frame, even if the
parent is from a different host. Adding dependency and changing description.
Status: NEW → ASSIGNED
Depends on: 91215
Priority: -- → P2
Summary: Javascript call fails, uncaught exception → Should be able to change location of another frame cross-origin
Target Milestone: --- → mozilla0.9.4

*** This bug has been marked as a duplicate of 52920 ***
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
QA Contact: ckritzer → bsharma
Marking verified duplicate.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.