178763 - smcu.com - Javascript menu doesn't work

Status: RESOLVED INCOMPLETE

(Tech Evangelism Graveyard :: English US, defect)

Description

[Sean Harding]

I'm positive this must be a dup, but I'm not sure what bug it's a dup of. I
wasn't able to find anything that looked like the same problem to me. So sorry
if there's an existing bug on this; I likely didn't search for the right thing.

On http://www.smcu.com/, along the top there is a row of tabs. Mousing over the
tabs changes the color of the tabs, but that's all it appears to do. It's
supposed to also show more options for the tab you've moused over in the white
area under the tabs. In Mozilla, that area just remains blank. It doesn't
generate any errors that I see in the Javascript console.

The direct URL of the frame containing the troublesome nav bar is
http://www.smcu.com/navbar.html and the Javascript file containing the functions
used is http://www.smcu.com/javascript/rollovers.js

This is Mac OS X Mozilla build 2002110508.

Comment 1

[Sean Harding]

Oops. Looks like there's another Javascript file I missed, and it uses layers.
Duh. Sorry.

I don't know if this should be assigned to tech evangelism or just closed. Up to
you.

Comment 2

[Boris Zbarsky [:bzbarsky]]

.

Comment 3

[Phil Schwartau]

Using Mozilla trunk binary 20021104xx on WinNT. Note: when I loaded
this site, I got this error in the JavaScript Console. I don't know
if it's relevant to the issue at hand or not:

Security Error:
Content at http://portal-1.diginsite.com/smcu/home/ may not load or
link to file:///C|/Documents%20and%20Settings/cooperd/smcu.css.


After the site loaded, I moused over a menu item and stepped through the
site's code in Mozilla's Tools > Web Development > JavaScript Debugger.
The key functionality is in http://www.smcu.com/javascript/rollovers.js:

          function toggle(n, on) {
 -   3         if (on == 1) {
 -   4             document.images["nav" + n].src = navIMG[n].on.src;
 -   5             hideText(n);
 -   6             showText(n);
     7         } else {
 -   8             if (on == 0) {
 -   9                 document.images["nav" + n].src = navIMG[n].off.src;
    10             } else {
 -  11                 hideText(n);
 -  12                 showText(n);
    13             }
    14         }
    15     }


where we have:


     2     function showText(n) {
 -   3         if (NS4) {
 -   4             document.layers["swaptext" + n].visibility = "show";
     5         }
 -   6         if (IE4) {
 -   7             document.all["swaptext" + n].style.visibility = "visible";
     8         }
 -   9         timer = setTimeout("resetText()", 10000);
    10 


In the JS Debugger, I found that both |NS4| and |IE4| evaluate
to |false| in Mozilla. Hence in Mozilla, the showText() function
is a no-op. It won't produce an error, but it won't do anything
else, either...

The browser-sniffing is in http://www.smcu.com/javascript/swaptext.js:

                   NS4=(document.layers);
                   IE4=(document.all);

Because of this, the site does not have a Mozilla codebranch for their 
navigation menu -

Comment 4

[Phil Schwartau]

More on that (unrelated) Security error above. It seems to be a
flat-out error at http://portal-1.diginsite.com/smcu/home/ : 

<link href="file:/C|/Documents%20and%20Settings/cooperd/smcu.css"       
      rel="stylesheet">

That hard-coded href makes no sense. The user will not even have
an smcu.css file on his hard-drive...

Comment 5

[Frankie]

Contact address is https://www.smcu.com/aboutus/contactus.html?email=web

Comment 6

[Nick Bebout]

SPAM: New Components

Comment 7

[chris hofmann]

one of the best references/recommendations I've found for encouraging financial institutions to support firefox is located at bankers on-line web site 

http://www.bankersonline.com/security/security_browserthreat070204.html 

It was written in 2004 during the download.ject attack, but much of it still applies today.  This is a good link to send when contacting banks.

Comment 8

[Chris Lawson (gone)]

INCOMPLETE due to lack of activity since the end of 2009.

If someone is willing to investigate the issues raised in this bug to determine whether they still exist, *and* work with the site in question to fix any existing issues, please feel free to re-open and assign to yourself.

Sorry for the bugspam; filter on "NO MORE PRE-2010 TE BUGS" to remove.