Closed Bug 1588598 Opened 5 years ago Closed 5 years ago

XML with local stylesheet is not displayed

Categories

(Core :: DOM: Security, defect)

Desktop
All
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1565261
Tracking Status
firefox-esr68 --- wontfix
firefox69 --- wontfix
firefox70 --- wontfix
firefox71 --- wontfix

People

(Reporter: igor.cali0, Unassigned)

References

(Regression)

Details

(Keywords: regression)

Attachments

(1 file)

1.81 KB, application/zip
Details

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:69.0) Gecko/20100101 Firefox/69.0

Steps to reproduce:

Ubuntu 18.04.3 OS.
Open an local XML with XLS stylesheet in the same folder.

Actual results:

Blank page is displayed.

Expected results:

Display the page.

Changing the setting security.fileuri.strict_origin_policy to false and refreshing the page makes the page to be correctly displayed.
Stylesheet tag: <?xml-stylesheet type="text/xsl" href="ombexport.xsl"?>

OS: Unspecified → Linux
Hardware: Unspecified → x86_64

Hi Igor,

Could you attach me a test case like it was done in this bug, please? https://bugzilla.mozilla.org/show_bug.cgi?id=1576010

Thanks in advance, Flor.

Flags: needinfo?(igor.cali0)
Attached file test case
Flags: needinfo?(igor.cali0)

(In reply to Florencia Di Ciocco from comment #1)

Hi Igor,

Could you attach me a test case like it was done in this bug, please? https://bugzilla.mozilla.org/show_bug.cgi?id=1576010

Thanks in advance, Flor.

Ciao Flor, test case attached.
Thanks!

Hi Igor,

Thanks so much for the test case! One more question, I tried opening the Bilancio.xml with XLS stylesheet in the same folder on Chrome and Firefox and both display the blank page. So this doesn't seem to be a firefox related bug. Do you agree?

Regards, Flor.

Flags: needinfo?(igor.cali0)

Ciao Flor,
I use FF only. Until some months ago (I will try later on until what version) this templates were successfully displayed by FF (both desktop/Linux and Android). The templates are generated by an app I code myself.
I wonder if anything changed in the XML policy.

Igor, you are right. I've tried on older versions and it's visible. Don't bother doing those tests, I'll do it myself and upload the result in a little while. Thanks for clarifying.

Regards, Flor.

Flags: needinfo?(igor.cali0)

Hi,

I attach the pushlog from the mozregression: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=4d37f42cecafac5c14d3dbc20a9204643b5cc3ea&tochange=b50ec6b229e5aa8c882aa65a265d27866a3ad042.

I've reproduced this bug on Windows 10. I've chosen a component. If you consider that there's another component that's more proper for this case you may change it.

Best regards, Flor.

Status: UNCONFIRMED → NEW
Has Regression Range: --- → yes
Has STR: --- → yes
Component: Untriaged → DOM: Core & HTML
Ever confirmed: true
OS: Linux → All
Product: Firefox → Core
Hardware: x86_64 → Desktop
Version: 69 Branch → Trunk

(In reply to Florencia Di Ciocco from comment #7)

Hi,

I attach the pushlog from the mozregression: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=4d37f42cecafac5c14d3dbc20a9204643b5cc3ea&tochange=b50ec6b229e5aa8c882aa65a265d27866a3ad042.

I've reproduced this bug on Windows 10. I've chosen a component. If you consider that there's another component that's more proper for this case you may change it.

Best regards, Flor.

Moving to the component DOM:Security according to the regression window.

Component: DOM: Core & HTML → DOM: Security
Status: NEW → RESOLVED
Closed: 5 years ago
Regressed by: CVE-2019-11730
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: