51623 - Panels don't load content from foreign servers

Status: VERIFIED WORKSFORME

(SeaMonkey :: Sidebar, defect, P4)

Description

[Ben Bucksch (:BenB)]

Reproduce:
1. Create a panel with <img src="http://servera/img.png">
2. Upload the panel to serverb (i.e. a server different from the one holding the
img)
3. Add the panel to your sidebar, look at it.

Actual result:
Image doesn't appear

Expected result:
Image does appear

Additional comments:
It is stated that panels are just "small webpages". For webpages, it is common
to embed objects from other servers. If rejecting them in the sidebar is a
security feature, what is the rationale?

Comment 1

[johng]

nav triage team:
QA, please verify - it surprises us that this would be the case

Comment 2

[shrirang khanzode]

This is not the case for me. I just tried adding panels with png, jpg, gif's 
(located on servers different than the panel's ) and it works fine. Marking this 
WFM.

Comment 3

[Ben Bucksch (:BenB)]

I am behind a proxy, maybe this is the reason Can you test this with a png file
outside a normal (required, Squid) proxy, please? REOPENing.

Comment 4

[shrirang khanzode]

let me see if i can reproduce the test environment.

Comment 5

[Ben Bucksch (:BenB)]

thanks. (BTW: it doesn't have to be a png - any img will do)

Comment 6

[johng]

nav triage team:
marking works for me again (Don made me do it)

Comment 7

[Ben Bucksch (:BenB)]

Please do not mark WORKSFORME unless you tested this. Having no time to test it
is no reason to close a bug. REOPENing and adding qawanted.

Comment 8

[don]

Taking ownership of this bug for investigation.

Comment 9

[verah (gone)]

Nav triage team: We're minusing this for now, because we can't judge how big a 
problem this is until we have some data. Once we have data and see this 
reproduced, we'll re-evaluate.

Comment 10

[Viswanath Ramachandran]

Since Don has left, Vishy is taking his bugs in bulk, pending reassignment.
thanks,
	Vishy

Comment 11

[Paul Chen]

nav triage team:

Marking nsbeta1+

Comment 12

[Paul Chen]

nav triage team:

Resetting priority so that this bug gets retriaged

Comment 13

[shrirang khanzode]

spam : changing qa to sujay (New Sidebar QA)

Comment 14

[Paul Chen]

removing nsbeta1+ from status whiteboard, need to retriage this

Comment 15

[Paul Chen]

Reassigning to matt, marking nsbeta1+, p4, mozilla0.9.1. Not sure we REALLY,
REALLY need to fix this, but we should find out why it's not working.

Comment 16

[Viswanath Ramachandran]

as discussed in nav team meeting, moving P4 and P5 nsbeta1+ bugs to Future. 

Comment 17

[Jon Califf]

I've tested this using http://www.dork.com/mkt/blah.html as my sidebar web page.
It uses an image from http://www.e-z.net/~silverst/ for a sample and there is no
problem on .95. Someone else please check and make sure that I've tested this
correctly, (I've left blah.html on dork.com) -- it only takes a second. There's
even a link to add it to your sidebar.

Comment 18

[Brasten Sager]

Tested using Jon Califf's test page.  Works fine on my system.  Win2000, build
2001111603.

Comment 19

[Jerome Lacoste]

If this has now been tested as WFM, shouldn't it be tagged as such?
(It is currently the only bug for the Sidebar component marked as qawanted - cf
Bugathon page).

Comment 20

[Ben Bucksch (:BenB)]

Nobody else could reproduce it (although nobody tested it using a proxy, it
seems), so I'll mark WFM myself. If I see the bug again (and preferably have
better repro info), I can reopen.

Comment 21

[sujay]

verified.