159348 - NS_ERROR_DOM_SECURITY_ERR when accessing to an iframe on same server but different port

Status: VERIFIED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[tangi]

With Mozilla 1.1b I can't anymore access in javascript the content of an iframe
pointing http://serverA:port1 from a page on http://serverA:port2. I get a
NS_ERROR_DOM_SECURITY_ERR on window.frames.myframe.document.body.innerHTML
though the two pages are on the same server and the document.domain properties
of both pages are correctly set to 'serverA'.
FYI, it works fine with Mozilla 1.1a/Linux and Netscape 7.0 french/Windows
(Gecko/20020512).

Thanks everybody for this great browser and its invaluable web development tools.

Comment 1

[Boris Zbarsky [:bzbarsky]]

Jonas, this is yours... Is the original security-sensitive?  Or not reported?

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

*** Bug 159885 has been marked as a duplicate of this bug. ***

Comment 3

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Attachment: switch to use principles instead of URIs

Comment 4

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 93198 [details] [diff] [review]
switch to use principles instead of URIs

r=me with the comment changes we discussed

Comment 5

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Attachment: switch to use principles instead of URIs, v2

added comments and also added an NS_ENSURE_FALSE to make sure that noone
_changes_ the uri of XUL prototype documents

Comment 6

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Comment on attachment 93204 [details] [diff] [review]
switch to use principles instead of URIs, v2

carrying forward r=bz

Comment 7

[Johnny Stenback (:jst)]

Comment on attachment 93204 [details] [diff] [review]
switch to use principles instead of URIs, v2

sr=jst

Comment 8

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Attachment: switch to use principles instead of URIs, v3

Same as previous one except that it makes sure that we get system principals
for XUL document prototypes when loaded from chrome URIs

Comment 9

[Johnny Stenback (:jst)]

Comment on attachment 93228 [details] [diff] [review]
switch to use principles instead of URIs, v3

sr=jst

Comment 10

[Asa Dotzler [:asa]]

Comment on attachment 93228 [details] [diff] [review]
switch to use principles instead of URIs, v3

a=asa (on behalf of drivers) for checkin to 1.1

Comment 11

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 93228 [details] [diff] [review]
switch to use principles instead of URIs, v3

r=bzbarsky

Comment 12

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

checked in

Comment 13

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

tangi could you please download a nightly from today and see if this is fixed?
Or provide an URL where i can test it?

Comment 14

[tangi]

Today's build fixed the bug. 

Thanks everybody.

Comment 15

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

*** Bug 161373 has been marked as a duplicate of this bug. ***