Issue metadata
Sign in to add a comment
|
"no access" when interacting with window object that has loaded a data URI
Reported by
mat.a.br...@gmail.com,
Feb 12 2017
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3009.0 Safari/537.36 Steps to reproduce the problem: 1. Create a new window using open(), and navigate it to a data URI. 2. Attempt to interact with the window, e.g. access newWindow.location.href What is the expected behavior? Window’s properties are available to be interacted with What went wrong? Browser throws error: "no access" Did this work before? Yes Chrome 56 (latest stable) Does this work in other browsers? Yes Chrome version: 58.0.3009.0 Channel: canary OS Version: OS X 10.12.3 Flash Version: Shockwave Flash 25.0 r0
,
Feb 13 2017
@mat.a.brown -- Thank You for the report. Able to reproduce the issue on Latest Dev# 58.0.3004.3 on Mac OS X 10.12.2. This is a recent Regression in M58, below are the bisect details -- Chrome Good Build -- 58.0.2989.0 (Revision: 445281). Chrome Bad Build -- 58.0.2991.0 (Revision: 445609). You are probably looking for a change made after 445574 (known good), but no later than 445575 (first known bad). CHANGELOG URL: https://chromium.googlesource.com/chromium/src/+log/f811aeb9e9174c1b3c097a20fbd201c99694547e..40b77e55ae0e7aecc86f4f3e1e4072c8a8dd92db @jam -- Could you please look into the issue, kindly re-assign if this is not related to your changes. Adding RB Label as this is a recent Regression. Note: This issue is not seen on Windows and Linux. Thank You.
,
Feb 17 2017
mat.a.brown@ since this marked as releaseblock-stable, could you please provide an latest update to this issue. Thank You...
,
Feb 17 2017
kkaluri I’d be happy to, but I won’t have access to a laptop until Monday night. I’ve contacted the user who alerted me to the effects of the bug in the product I maintain to see if they can confirm the fix sooner though.
,
Feb 17 2017
#4 - I am not sure what update you are supposed to provide, really. I think #3 meant jam@ (the owner) instead of you. :) I am not sure this bug will be fixed, to be honest. Programmatically navigating (window.open is a navigation) to data: URLs is deprecated and slated to be removed soon (at least for the top frame, so window.open is definitely included), due to constant abuse by malicious parties. See this thread for the unfortunate details - https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/GbVcuwg_QjM However, if you can reproduce this bug with a non-data: URL, it is a bug that will probably fixed.
,
Feb 22 2017
Friendly ping!! jam@, Could you please take look into this. Thank you!!
,
Mar 1 2017
jam@ since this marked as releaseblock-stable and also seen this issue in Mac 10.12.3 with chrome canary #58.0.3026.0 could you please provide an latest update to this issue. Thank You...
,
Mar 8 2017
Gentle ping to get an update on this as it was marked as a blocker. Thank you!!
,
Mar 20 2017
Tested on mac os 10.12.3 using chrome M58 #58.0.3029.19 and chrome canary M59 #59.0.3046.0 and followed below steps :
1. Downloaded and opened given html file in chrome.
2. Clicked on "click me " and new page with hello message opened.
3. Opened dev tools on click me page and observed error message "Uncaught DOMException: Blocked a frame with origin "null" from accessing a cross-origin frame.
at setTimeout (file:///Users/hdodda/Downloads/reduction.html:11:43)"
@jam-- Could you please check attached screencast and look into this issue.
Thanks!
,
Mar 27 2017
Just to update the latest behaviour, Able to reproduce the issue on Mac 10.12.3 using latest canary #59.0.3053.0. jam@ - Gentle Ping...!! Could you please have a look into this issue as it has been marked as a stable blocker. Thanks...!!
,
Apr 4 2017
Gentle ping ... Could you please provide us an update on this . Thanks!
,
Apr 5 2017
A friendly reminder that M58 Stable launch is coming soon! Your bug is labelled as Stable ReleaseBlock, please make sure to land the fix, verified in trunk and get it merged into the release branch ASAP.
,
Apr 6 2017
A friendly reminder that M58 Stable is launch is coming soon (less than 2 weeks)! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and get it merged into the release branch ASAP so it gets enough baking time in Beta (before Stable promotion). Thank you!
,
Apr 13 2017
Tested the issue on Mac 10.12.4 using latest canary #59.0.3070.0. Attached a screencast for reference. mat.a.brown@ - Could you please check the screen cast and please let us know if it has been fixed in the latest canary #59.0.3070.0. Thanks...!!
,
Apr 13 2017
krajshree@ confirmed, this is fixed in latest Canary! Thank you!
,
Apr 17 2017
Just to update the latest behaviour, Still able to reproduce the issue on Mac 10.12.4 using latest beta #58.0.3029.68. jam@ - Gentle Ping...!! Could you please have a look into this issue as it has been marked as a stable blocker. Thanks...!!
,
Apr 17 2017
Just a heads up since this is marked as RB-Stable - we are aiming to launch M58 early stable this Wednesday, RC cut today @ 5:00 PM PT or latest by tomorrow noon if all goes well. Can you please take a look at this urgently?
,
Apr 17 2017
Not blocking M58 stable, but please have a fix before M59 hits Stable.
,
Apr 19 2017
,
May 18 2017
A friendly reminder that M58 Stable is launch is coming soon (less than 2 weeks)! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and get it merged into the release branch ASAP so it gets enough baking time in Beta (before Stable promotion). Thank you!
,
May 18 2017
Oops meant M59 above, Not M58^
,
May 18 2017
Reminder that M59 Stable is launch is coming soon (less than 2 weeks)! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and get it merged into the release branch ASAP so it gets enough baking time in Beta (before Stable promotion). Thank you!
,
Jun 2 2017
Since this is not a new regression, marking it as a non-blocker for M59.
,
Jun 6 2017
Ravi, is this still reproducible in latest channels?
,
Jun 7 2017
Tested this issue on present Stable & Beta (#59.0.3071.86) and able to reproduce this issue. But the given test case in comment #0 is not working as expected on present Dev(#60.0.3112.20) and Canary(#61.0.3122.0) Attaching the screen-cast for reference.
,
Jul 5 2017
Friendly ping to get an update on this, marked as blocker for M-61.
,
Jul 11 2017
Still we are able to reproduce the issue on Mac 10.12.5 using latest Canary-61.0.3153.3.As it is RBS issue,could you please check the same & update the thread accordingly. Please find the attached screencast os Canary & Stable for reference. Note: 1.Same issue observed on latest Dev#61.0.3141.7 & Beta#60.0.3112.50. 2.On stable-59.0.3071.115,User navigated to hello page & seen error in devtools>console on the same page Thanks..!!
,
Jul 11 2017
A friendly reminder that M61 branch is coming soon on 07/20! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix ASAP to trunk. This way we branch M61 from a high quality trunk. Thank you.
,
Jul 19 2017
Removing the Blocker as this has been there since past 4 milestones and as per C#5. Feel free to add it back if someone feels otherwise.
,
Dec 14 2017
Works for me.
,
Jan 29 2018
What version was this fixed in? |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by ajha@chromium.org
, Feb 13 2017