Geolocation in cross-origin iframes
Reported by
adfath...@gmail.com,
Nov 12
|
||||||||||
Issue descriptionChrome Version : 70.0.3538.77 URLs (if applicable) : x-origin iframes What steps will reproduce the problem? (1) Use a cross-origin iFrame with allow="geolocation" (2) In the iFrame, execute a script which fetches the user's location: navigator.geolocation.getCurrentPosition(handlePosition, errorCallback); What is the expected result? Geolocation requests should trigger a request for location from the user, then fetch the geolocation results. What happens instead? Geolocation access has been blocked because of a Feature Policy applied to the current document. See https://goo.gl/EuHzyv for more details. Is printed in the console.
,
Nov 12
,
Nov 13
adfathman@ - Thanks for filing the issue...!! Could you please provide a sample test file/url to test the issue from TE-end. This will help us in triaging the issue further. Thanks...!!
,
Nov 15
Adding Feature Policy component because this seems like a bug however an example URL will be very helpful as we already have tests that should be covering simple cases such as this.
,
Nov 15
Example: https://jsfiddle.net/0a7yxu8b/1/ Works in Firefox with prompt Doesn't Work in Chrome. This is true even when clicking the lock next to the URL, setting the permission to "Allow", or going to Chrome settings and just auto allowing Location.
,
Nov 15
Thank you for providing more feedback. Adding the requester to the cc list. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Nov 15
Able to reproduce the issue on Mac 10.13.6, Win-10 and Ubuntu 17.10 using chrome reported version #70.0.3538.77 and latest canary #72.0.3610.0. This is a non-regression issue as it is observed from M60 old builds. Hence, marking it as untriaged to get more inputs from dev team. Thanks...!!
,
Nov 21
odejesush@ to try to reproduce. We cannot reproduce a failure on Chrome 70 or 71. In both cases the demo link asks for permission and prints the current location to the console.
,
Nov 21
,
Nov 21
I tried the JSFiddle example in Linux Chrome 70.0.3538.77, and I was not able to reproduce the problem. As soon as I loaded the JSFiddle example, I received a request to allow https://importagenttest.firebaseapp.com to access my location, and the console printed my latitude and longitude. Clicking on the "Click Me!" button refreshes the location.
,
Jan 11
Hi adfathman, I tested the example URL again in the current stable build (71.0.3578.98 (Official Build) (64-bit)) in Linux and Mac as well as the dev channel build (73.0.3664.3 (Official Build) dev (64-bit)) in Linux. Do you still see this issue in the latest canary build? |
||||||||||
►
Sign in to add a comment |
||||||||||
Comment 1 by phanindra.mandapaka@chromium.org
, Nov 12