1398749 - Blank sidebar while opening a same-origin url using Yahoo Mail Sidebar 61.1

Status: VERIFIED FIXED

(WebExtensions :: Compatibility, defect)

Description

[Vasilica Tamas, QA [:vtamas]]

[Affected versions]:
Firefox 57.0a1 (20170910220126)
Firefox 56.0b10 (20170907194642)

[Affected platforms]:
Windows 10 64-bit
Mac OS X 10.12.3

[Steps to reproduce]:
1.Launch Firefox Release with a clean profile.
2.Make sure that  "extensions.webextensions.remote” pref is set to true.
3.Install the following webextension: https://addons.mozilla.org/firefox/downloads/file/718786/yahoo_mail_sidebar-61.1-an+fx.xpi?src=version-history
4.Click on “Trouble signing in?” or “Sign up” link from the sidebar.

 
[Expected Results]:
Same-origin urls are successfully loaded in the sidebar. 

[Actual Results]:
- The sidebar becomes blank and the url is never loaded.
- This issue is not reproducible while using Yahoo Mail Sidebar version 61.0.
- The following errors are thrown in Browser Console:
SecurityError: Permission denied to access property "localtion" on cross-origin object  login.yahoo.com:337
TypeError: E is undefined  login.yahoo.com:375:1858
Load denied by X-Frame-Options: https://login.yahoo.com/account/challenge/username?.lang=en-US&done=https%3A%2F%2Fmail.yahoo.com%2F&authMechanism=secondary&yid=&s=RA--&sessionIndex=RA--&c=UnkOxRj.2bKeOgAW1dNerSsFbNc0IF7peQjAKazdaEfIIh9BVt1aGsvOXl99Y15mLZROGM509d8ybZzrjrVDFKqrdg2OjVcykBPgHZ5de_Gq6d90n36JXuUfuckWpfWfMgujMJdSX216QxOocDQ2DzrRb1QFqUmAN1wSgpunefQ8587VdkeU9oDScYuDvch17iFBvY0OOSuFhv1_lDIyeVjtt7S1pAhkw_KT28xnr8_h.Z5GCg--~A does not permit framing.

Comment 1

[Vasilica Tamas, QA [:vtamas]]

Attachment: yahoosidebar.gif

I am attaching a screencast.

Comment 2

[Vasilica Tamas, QA [:vtamas]]

Andreas, can you please contact the developers about this issue?

Comment 3

[Andreas Wagner [:TheOne] [use NI]]

I added the author to cc here.

Baris, would you mind taking a look?

Comment 4

[Baris Derin]

Thanks Vasilica for the report.

Thanks Andreas for letting me know. I submitted 61.3 that fixes the issue.

Comment 5

[Andy McKay]

Closing based on comment 4, thanks all.

Comment 6

[Vasilica Tamas, QA [:vtamas]]

Attachment: same-origin-urls.gif

I confirm that 61.3 version fixes this issue. Same-origin urls are successfully loaded in the sidebar.

Comment 7

[Vasilica Tamas, QA [:vtamas]]

Verified as fixed on Firefox 57.0a1 (20170913100125) and Firefox 56.0b11 (20170911193316) under Windows 10 64-bit and Mac OS X 10.12.3.