285478 - Cannot access document.styleSheets[0].cssRules in XHTML

Status: RESOLVED INVALID

(Core :: DOM: Core & HTML, defect)

Description

[Aaron Leventhal]

NS_DOM_ERROR_BAD_URI exception for
javascript:alert(document.styleSheets[0].cssRules);

Steps:
1. Load HTML document, execute
javascript:alert(document.styleSheets[0].cssRules);
The alert should say [object CSSRuleList]

2. Load XHTML document, execute same JS rule
No alert will show up. The JavaScript console reports NS_ERROR_DOM_BAD_URI

Comment 1

[Aaron Leventhal]

Attachment: Test case in HTML: it works

Comment 2

[Aaron Leventhal]

Attachment: Test case in XHTML: it's broken

Comment 3

[Johnny Stenback (:jst)]

This fails because in the XHTML document document.styleSheets[0] seems to be
coming from "http://www.w3.org/StyleSheets/TR/base", so our security checks
block access (from bugzilla).

Comment 4

[Boris Zbarsky [:bzbarsky]]

The source has:

 <?xml-stylesheet type="text/css" href="http://www.w3.org/StyleSheets/TR/base"?>

In XHTML that means a stylesheet to be loaded, and we can't allow access to that
sheet for security reasons, as you pointed out.

In HTML it means absolutely nothing (and isn't even included in the testcase),
so the [0] element of styleSheets comes from the <style>.  Accessing that is fine.

Sounds like everything is working correctly.