Webrev bug in produced Javascript?

Bradford Wetmore bradford.wetmore at oracle.com
Wed Aug 12 00:56:04 UTC 2015


One last data point which may give a clue to a web developer.

On Firefox, F12 turns on the debugger for Net/CSS/JS/Security/Logging. 
Here's the log output:

     ancnav.js:57.1
     Error:  Permission denied to access property "document"

Which seems to be from this code:

        // The way we compute the max anchor value is to stash it
        // inline in the left and right hand side pages-- it's the same
        // on each side, so we pluck from the left.
        //
        maxval = parent.lhs.document.eof.value.value;

It sounds to be a cross-site scripting attack prevention. Over my head 
at this point.  Maybe it's having trouble getting "domains" when local 
filenames are used.  e.g.

       <frame src="ExtendedSSLSession.java.lhs.html" ... />
       <frame src="ExtendedSSLSession.java.rhs.html" ... />

     </frameset>
             <frameset rows="60, 30">
               <frame src="../../../../../../../ancnav.html"

Thanks,

Brad





On 8/11/2015 5:15 PM, Bradford Wetmore wrote:
> Correction:  it does not completely work on IE after all.  My apologies:
>   I thought I saw it working, but apparently I used the wrong URL.
>
> "Scroll Up" and "Scroll Down" work fine, but when I click on "BOF",
> "EOF", "Prev Diff", "Next Diff", it displays:
>
> ---begin---
>      This page can't be displayed
>
>      •Make sure the web address is correct.
>      •Look for the page with your search engine.
>      •Refresh the page in a few minutes.
> ---end---
>
> on both the LHS and RHS.
>
> Brad
>
>
>
> On 8/11/2015 5:05 PM, Bradford Wetmore wrote:
>>
>> Here is a long-standing bug that still bites me and was hoping someone
>> with javascript smarts might have a suggestion.
>>
>> I'm on Windows 7 + cygwin + Firefox.  On the generated webrev, if I try
>> to use Frames on my local system, the navigation buttons are
>> non-responsive.  e.g.
>>
>>
>> file:///d:/java/ws/dev/jdk/8051498/webrev.04/src/java.base/share/classes/javax/net/ssl/ExtendedSSLSession.java.frames.html
>>
>>
>>
>> However, if I use IE, or upload the cr.openjdk.java.net:
>>
>>
>> http://cr.openjdk.java.net/~wetmore/8051498/webrev.04/src/java.base/share/classes/javax/net/ssl/ExtendedSSLSession.java.frames.html
>>
>>
>>
>> I have no problems with navigation.
>>
>> Only Firefox fails.  My workaround are IE or uploading, but I have some
>> nice extras in Firefox that I miss.
>>
>> Any suggestions?
>>
>> Brad
>>


More information about the webrev-dev mailing list