window.open in address bar throws a security error

RESOLVED WORKSFORME

Status

()

RESOLVED WORKSFORME
17 years ago
16 years ago

People

(Reporter: jruderman, Assigned: security-bugs)

Tracking

({regression})

Trunk
mozilla1.3alpha
x86
Windows 2000
regression
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

17 years ago
Steps to reproduce: 
1. Go to http://www.mozilla.org/
2. Paste this url into the address bar and hit enter:
javascript:x=window.open("http://www.mozilla.org/"); alert(1); alert(x);

Result:
The window opens, but the rest of the javascript does not run and the variable x
is not set.  An error message appears in the javascript console: "Error:
uncaught exception: Security Error: Content at http://www.mozilla.org/ may not
load data from chrome://navigator/content/navigator.xul."

The same javascript code works as a bookmarklet in the personal toolbar, as a
javascript link in a page, or as an onclick handler for a <button> in a page.

I'm using 2002 071813 on Windows 2000.
(Reporter)

Updated

17 years ago
Keywords: regression
(Assignee)

Comment 1

17 years ago
I'll look into it, but unless you're seeing this on a major website somewhere,
this is going to be low priority.
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla1.2beta
(Assignee)

Updated

16 years ago
Target Milestone: mozilla1.2beta → mozilla1.3alpha
(Reporter)

Comment 2

16 years ago
WFM in Mozilla 12/23 on Windows XP.
Status: ASSIGNED → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.