20261 - Security error adding textNode to anchor element.

Status: VERIFIED FIXED

(Core :: Security, defect, P3)

Description

[Robert Ginda]

JavaScript Error: access disallowed from scripts at
file:////home/rginda/src/mozilla_RIGHT/mozilla/dist/bin/irc/tests/test3.xul to
documents at another domain
URL: resource:///irc/tests/test3-static.js
LineNo: 278

test3.xul has no web content.  test3-static.js is included in test3.xul via a
<script src='...'> tag.  The code being run is:

    var a = document.createElement (tagName);
    a.setAttribute ("class", className);

    switch (typeof data)
    {
        case "string":
278:        a.appendChild (document.createTextNode (data));
            break;


setting security.checkdomprops to false is a temporary workaround.

Comment 1

[Norris Boyd]

Does this still occur?

Comment 2

[Robert Ginda]

This occurs in a new spot now:
JavaScript Error: access disallowed from scripts at [Codebase
file:///home/rginda/src/mozilla_RIGHT/mozilla/dist/bin/irc/tests/test3.xul] to
documents at another domain
URL: resource:///irc/tests/test3-static.js
LineNo: 284

281:    var oc = top.frames[0].document;
282:
283:    oc.close();
284:    oc.open();

It happens before the code previously reported runs, so it's impossible to tell
if the last problem went away.

Again, top.frames[0].document is pointing to about:blank at the time of the
error.

Comment 3

[Norris Boyd]

IRC Chat should now work without modifying any security preferences.

Comment 4

[John Unruh]

Verified fixed.

Comment 5

[leger]

Bulk moving all Browser Security bugs to new Security: General component.  The 
previous Security component for Browser will be deleted.