Can't open the DialogWindow.

VERIFIED WONTFIX

Status

()

Core
Security
P3
normal
VERIFIED WONTFIX
17 years ago
17 years ago

People

(Reporter: tato, Assigned: Mitchell Stoltz (not reading bugmail))

Tracking

Trunk
x86
Windows NT
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

17 years ago
Can't open the DialogWindow.
test on 2000101408 WinNT 

<script>

function openDlg(url){
{
test1=openDialog(url)
}

</script>
<form>
  <input type="button" value="openDialog1" onClick="openDlg('test.htm')">
  <input type="button" value="openDialog2" onClick="openDialog('test.htm')">
</form>
(Reporter)

Comment 1

17 years ago
misspell...
function openDlg(url){
   test1=openDialog(url)
}

Comment 2

17 years ago
I see Security warnings in the JavaScript console. 
Reassigning to Security for further triage -
Assignee: rogerl → mstoltz
Component: Javascript Engine → Security: General
QA Contact: pschwartau → czhang
(Assignee)

Comment 3

17 years ago
This is the correct behavior. As of 10/14, window.openDialog is no longer
accessible from non-system code. openDialog has some security problems, and we
didn't think too many people were using it except in chrome. You're not writing
chrome, are you? openDialog with just one parameter is a synonym of
window.open(), can you use that instead? Marking WONTFIX.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 17 years ago
Resolution: --- → WONTFIX

Comment 4

17 years ago
Verified wontfix.
Status: RESOLVED → VERIFIED
(Reporter)

Comment 5

17 years ago
>accessible from non-system code. 
It is very disappointing.
I serialized the article of XUL in the Japanese magazine.
So, openDiarog was being used.
Does it lack the possibility that it comes so that it can use it at all?

<menu>
http://game.gr.jp/xul/tips/
<tree>
http://game.gr.jp/xul/tips0010/
<tab>
http://game.gr.jp/xul/tips0011/xul/index.htm
(Assignee)

Comment 6

17 years ago
Try using window.open() instead of openDialog. Yes, openDialog is no longer
accessible from web code because it is not secure. Sorry about that.
(Reporter)

Comment 7

17 years ago
>openDialog is no longer accessible from web code 
Is it no longer on the local too?
(Assignee)

Comment 8

17 years ago
It is callable only by pages in the chrome directory, loaded using a chrome:// url.
(Assignee)

Comment 9

17 years ago
Can you use open() instead of openDialog?
(Reporter)

Comment 10

17 years ago
Now I change these web pages to window.open(). (Can't change CD-ROM and 
Magazines.)
 
The difference between open() and openDialog() 
1. width & height ( open() is Min 100*100 because it is not secure? )
2. open() is not Diarog...

 
You need to log in before you can comment on or make changes to this bug.