Closed
Bug 92847
Opened 24 years ago
Closed 24 years ago
Should be able to change location of another frame cross-origin
Categories
(Core :: Security, defect, P2)
Tracking
()
mozilla0.9.4
People
(Reporter: sicoffey, Assigned: security-bugs)
References
()
Details
From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2+) Gecko/20010713 BuildID: 2001071304 This is a new online shopping site, one of the biggest UK chains. It uses Javascript for a 'postcode lookup' to identify delivery areas. With Mozilla this fails, Javascipt console shows Error: uncaught exception: Permission denied to access property I'm guessing this is an Evangelism issue rather than a true Moz bug, but I could be wrong. Reproducible: Always Steps to Reproduce: 1. Go to the URL above 2. Enter a postcode eg. RG1 2PY and click the envelope icon Actual Results: Quick flash of the Javascipt call in the status bar, but no action Expected Results: Should display new page with delivery details - works with IE/NN4
Comment 1•24 years ago
|
||
-> Security and confirming
Assignee: bclary → mstoltz
Status: UNCONFIRMED → NEW
Component: Evangelism → Security: General
Ever confirmed: true
QA Contact: zach → ckritzer
Comment 2•24 years ago
|
||
Site seems to be calling location.replace on a different child of the parent, but this should work... Site is also using document.all, but that's a separate bug that should be filed on evangelism, I would say.
Assignee | ||
Comment 3•24 years ago
|
||
Yeah, you should be able to do location.replace on a sibling frame, even if the parent is from a different host. Adding dependency and changing description.
Status: NEW → ASSIGNED
Depends on: 91215
Priority: -- → P2
Summary: Javascript call fails, uncaught exception → Should be able to change location of another frame cross-origin
Target Milestone: --- → mozilla0.9.4
Comment 4•24 years ago
|
||
*** This bug has been marked as a duplicate of 52920 ***
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•