New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 648626 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Oct 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

XSLT via http no working

Reported by saf...@gmail.com, Sep 20 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36

Example URL:
https://github.com/fprades/chrome-xslt-issue

Steps to reproduce the problem:
1. Copy file.xml and file.xslt to your webserver
2. Browse to file.xml
3. 

What is the expected behavior?
A page with Success as the title, and hello world paragraph.

What went wrong?
Nothing is shown, not even an error message. Only on the developer console.

Did this work before? Yes 6 months ago

Chrome version: 52.0.2743.116  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 22.0 r0

I've been reviewing  issue 70088 . That issue describes blocks on file protocol. This use to work on http, and https.

The dev console reads:

Unsafe attempt to load URL http://localhost:8080/file.xslt from frame with URL http://localhost:8080/file.xml. Domains, protocols and ports must match.
 
Components: -Internals>Network Blink>XML
Network bug triager here.  After a cursory code search, I'm re-assigning the component, on the basis that it is generated from  FrameFetchContext::printAccessDeniedMessage(), for further triage.
Labels: Needs-Feedback
Owner: dominicc@chromium.org
Status: WontFix (was: Unconfirmed)
I'm closing this for now until we get more information.

When I load https://rawgit.com/fprades/chrome-xslt-issue/master/file.xml I see the stylesheet is loaded and applied. It fails, complaining of trailing content (open the page in the inspector and look at the DOM), but you see the title is "success", etc.

Maybe this was a regression that was fixed? Until we get a repro failing in a specific version it is hard to track this down further.

Comment 4 by saf...@gmail.com, Oct 14 2016

I don't understand why this is closed as won't fix. I'm not sure who should provide more info. Before closing should ask for more info. Marking as won't fix looks like won't be addressed ever. I'm interested in getting this fixed and track it. Please can you reopen?
Cc: rnimmagadda@chromium.org
Anyone is welcome to provide more information. The Needs-Feedback label means we'd like more information. rnimmagadda: it might be worth briefly explaining what's needed when adding the label.

safull, I looked at your bug report and I think the only problem here is the error message about your XML--trailing content--is inserted in the HEAD element which makes it not appear. It's not ideal, but you can use Inspector to look at the DOM and see the error message. Unfortunately we don't have the resources to improve how XML error messages are displayed.

Comment 6 by saf...@gmail.com, Oct 26 2016

Hi dominicc,

I've been reviewing the issue. I finally found the root cause: it's due to the header Content-Security-Policy.

Content-Security-Policy: sandbox; default-src 'none'; img-src 'self'; style-src 'self';

Which was disabling xslt processing.

Ah! Good sleuthing. Glad you worked it out.

Sign in to add a comment