101585 - links in a frame not opening in IMP webmail interface to new windows or opening at all

Status: VERIFIED WORKSFORME

(Core :: Security, defect)

Description

[Rob B.]

Our company uses IMP by Horde (http://horde.org/imp) to provide web based email
access for our customers. Once the customers have logged in, among other things,
they can click on a 'compose' or 'contacts' link. The links are supposed to open
a new window to either compose a new letter, or bring up the user's contacts
respectively. However, with Mozilla, the links do nothing. The URL that
demonstrates the bug leads to a demo version of IMP that can be used to test the
problem.

To reproduce this problem:
 1. Go to the demo version of IMP at
http://demo.horde.org/stable/horde/imp/index.php3
 2. Log in with valid email server information
 3. Click on the Compose or Contacts link on the left hand menu.

On the previous edition of IMP (2.2.6), which is the one we use at our business,
clicking on the compose link will actually add an additional pull down menu. If
any of the Mozilla coders who would be working on this problem need to have an
actual, working email box on our system to test, please contact me at
[e-mail]. I will be able to assist in getting one.

Comment 1

[Rob B.]

Whoops. The bugzilla form didn't post my version. Using Mozilla build
2001092403, Win ME.

Comment 2

[Phil Schwartau]

This is not likely to be a JS Engine bug; reassigning to Browser-General
until we get more info. 

[e-mail]:

1. Did this URL ever work in previous Mozilla builds? i.e. is this a 
   recent regression in Mozilla? 

2. Are there any errors in the JavaScript Console when you click on 
   a link? (Do Tasks | Tools | JavaScript Console to see them; be sure
   to clear out the console of errors from other websites before testing.)

3. Is there any use of layers in the HTML? (e.g. document.layers) 
   This often prevents menus from working, because layers are not 
   supported in Mozilla (they are not W3C-standard)


Of course if the URL used to work in earlier Mozilla builds, 
then question 3 is not a factor..

Comment 3

[Rob B.]

Ok. First, qucik answer to questions 1 and 3. I can't ever remember it working,
and the page does not use layers, just frames and tables. In fact, the problem
is even worse in older builds (like Netscape 6.1).

Now, on to 2. I opened the webmail interface, cleared the javascript console,
and got 2 errors when I clicked on the 'Compose' link.

Error 1:
 Error: uncaught exception: Permission denied to call method Window.open

Error 2:
 Error: [Exception... "Component returned failure code: 0x8000ffff
(NS_ERROR_UNEXPECTED) [nsIPref.GetBoolPref]"  nsresult: "0x8000ffff
(NS_ERROR_UNEXPECTED)"  location: "JS frame ::
chrome://prefbar/content/prefbarOverlay.js :: setPrefbarItem :: line 50"  data: no]
Source File: chrome://prefbar/content/prefbarOverlay.js
Line: 50

Now, what's interesting is that I get Error 2 on *every one* of the menu links
that I click on. (There are 10 links total, 8 of which work.) However, only the
Compose and Contacts link are supposed to open new windows, and that's what
isn't working.

As stated, if any of the coders needs an account to view all the source, test,
whatever, please let me know. Our company would be happy to assist with
resolving the problem.

Comment 4

[Phil Schwartau]

[e-mail]: Thanks -

It sounds like this has to do with issues like cross-domain access.
Let me assign this to Security:General for further triage. They will
know about issues like "Permission denied to call method Window.open"

Comment 5

[Mitchell Stoltz (not reading bugmail)]

Both the Compose and Contacts buttons work for me in a Mozilla build from this
weekend. Are you still seeing this problem? Could you please retest? Does it
matter whether I was logged into a POP or IMAP account through your webmail
client (I was using a POP3 account). 

Comment 6

[Rob B.]

I tried accessing the IMP webmail compose and contacts buttons from both the
demo site and from our site, and I'm still getting the following error message
in the Javascript Console:

Error: uncaught exception: Permission denied to call method Window.open

I'm using build 2001100103, Windows ME. I also tried both POP and IMAP on the
demo site, and it came up with the error each time.

Comment 7

[bsharma]

mailto:[e-mail], could you provide the test account, so that I can reproduce
this bug on my side.

Comment 8

[Rob B.]

This seems to have been resolved with recent builds. At least since the 10/26 
build, the IMP webmail interface works fine. Unless it regresses, I'd say this 
is resolved. Thanks for all the checking. :)

Comment 9

[bsharma]

Marking WFM as per above comments.