20263 - Security manager prevents script from listening to events

Status: VERIFIED FIXED

(Core :: Security, defect, P3)

Description

[Robert Ginda]

JavaScript Error: Access denied to listen to events across origins
URL: resource:///irc/tests/test3-static.js
LineNo: 78

JavaScript Error: Access denied to listen to events across origins
URL: resource:///irc/tests/test3-static.js
LineNo: 543

source is in
http://lxr.mozilla.org/seamonkey/source/extensions/irc/xul/tests/test3-static.js

This .js file is included in .xul file via a <script src='...'> tag.  In the
first error (line 78), the script is attempting to attach a onkeyup handler to a
html input control defined in the xul file.  The second error (line 543) is
attempting to attach an onclick handler to a toolbaritem created dynamically.

From my poking around, it appears that setPrincipal is never called in the
layout's nsEventEventListenerManager, so the SameOrigin test always fails.

Comment 1

[german]

I get the same error with attaching handlers to object's events in a simple
non-Xul html document. This error did not appear before and it's believed to be
valid Javascript. It showed up on Mon's build that is 19991129.

Comment 2

[Norris Boyd]

Could you see if this still occurs? I fixed another bug in this area that may
have fixed this.

Comment 3

[Norris Boyd]

Rob says this is now fixed.

Comment 4

[Robert Ginda]

Marking verified.

Comment 5

[german]

Thank you. I am not seeing this error any longer!

Comment 6

[leger]

Bulk moving all Browser Security bugs to new Security: General component.  The 
previous Security component for Browser will be deleted.