56709 - Can't open the DialogWindow.

Status: VERIFIED WONTFIX

(Core :: Security, defect, P3)

Description

[tato]

Can't open the DialogWindow.
test on 2000101408 WinNT 

<script>

function openDlg(url){
{
test1=openDialog(url)
}

</script>
<form>
  <input type="button" value="openDialog1" onClick="openDlg('test.htm')">
  <input type="button" value="openDialog2" onClick="openDialog('test.htm')">
</form>

Comment 1

[tato]

misspell...
function openDlg(url){
   test1=openDialog(url)
}

Comment 2

[Phil Schwartau]

I see Security warnings in the JavaScript console. 
Reassigning to Security for further triage -

Comment 3

[Mitchell Stoltz (not reading bugmail)]

This is the correct behavior. As of 10/14, window.openDialog is no longer
accessible from non-system code. openDialog has some security problems, and we
didn't think too many people were using it except in chrome. You're not writing
chrome, are you? openDialog with just one parameter is a synonym of
window.open(), can you use that instead? Marking WONTFIX.

Comment 4

[John Unruh]

Verified wontfix.

Comment 5

[tato]

>accessible from non-system code. 
It is very disappointing.
I serialized the article of XUL in the Japanese magazine.
So, openDiarog was being used.
Does it lack the possibility that it comes so that it can use it at all?

<menu>
http://game.gr.jp/xul/tips/
<tree>
http://game.gr.jp/xul/tips0010/
<tab>
http://game.gr.jp/xul/tips0011/xul/index.htm

Comment 6

[Mitchell Stoltz (not reading bugmail)]

Try using window.open() instead of openDialog. Yes, openDialog is no longer
accessible from web code because it is not secure. Sorry about that.

Comment 7

[tato]

>openDialog is no longer accessible from web code 
Is it no longer on the local too?

Comment 8

[Mitchell Stoltz (not reading bugmail)]

It is callable only by pages in the chrome directory, loaded using a chrome:// url.

Comment 9

[Mitchell Stoltz (not reading bugmail)]

Can you use open() instead of openDialog?

Comment 10

[tato]

Now I change these web pages to window.open(). (Can't change CD-ROM and 
Magazines.)
 
The difference between open() and openDialog() 
1. width & height ( open() is Min 100*100 because it is not secure? )
2. open() is not Diarog...