Closed Bug 1134557 Opened 9 years ago Closed 7 years ago

Problem accessing cross domain content from SSL enabled sites (addon sdk)

Categories

(Add-on SDK Graveyard :: General, defect)

x86_64
Windows 8.1
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: gemini, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36

Steps to reproduce:

Create addon with cross-domain iframe like in example with wikipedia https://developer.mozilla.org/en-US/Add-ons/SDK/Guides/Content_Scripts/Cross_Domain_Content_Scripts#Cross-domain_iframes
Change wikipedia url to any https url e.g. https://secure.url/
set 
"permissions": {
  "cross-domain-content": ["https://secure.url/"]
}


Someone else also encountered same problem: 
http://stackoverflow.com/questions/28130530/firefox-extension-cross-domain-iframe-https


Actual results:

permission denied accessing contents from inside iframe.


Expected results:

Since  "cross-domain-content" is set to allow "https://secure.url/" (includes scheme) then according to docs here: 
https://developer.mozilla.org/en-US/Add-ons/SDK/Guides/Content_Scripts/Cross_Domain_Content_Scripts
it should be possible to access its contents also for SSL enabled websites
Component: Untriaged → Layout: HTML Frames
Product: Firefox → Core
This isn't a layout issue.  Over to the addon SDK to figure out whether this is a problem on their end or somewhere down in Gecko, and if the latter where.
Component: Layout: HTML Frames → General
Product: Core → Add-on SDK
Version: 35 Branch → unspecified
we are setting this to New so that component group can review
Status: UNCONFIRMED → NEW
Ever confirmed: true
https://bugzilla.mozilla.org/show_bug.cgi?id=1399562
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.