Webrev bug in produced Javascript?

Magnus Ihse Bursie magnus.ihse.bursie at oracle.com
Thu Sep 17 08:40:39 UTC 2015


On 2015-08-12 02:56, Bradford Wetmore wrote:
> One last data point which may give a clue to a web developer.
>
> On Firefox, F12 turns on the debugger for Net/CSS/JS/Security/Logging. 
> Here's the log output:
>
>     ancnav.js:57.1
>     Error:  Permission denied to access property "document"

Just a piece of input: I just tested on my computer, Firefox 40.0.3 (my 
god how they are incrementing that version number!) and Linux, and I had 
no problem navigating the frame view when reading a local file. So maybe 
it's a Windows thing. You mentioned cygwin. Can you check if there seems 
to be any file permission issues with the webrev files?

/Magnus

>
> Which seems to be from this code:
>
>        // The way we compute the max anchor value is to stash it
>        // inline in the left and right hand side pages-- it's the same
>        // on each side, so we pluck from the left.
>        //
>        maxval = parent.lhs.document.eof.value.value;
>
> It sounds to be a cross-site scripting attack prevention. Over my head 
> at this point.  Maybe it's having trouble getting "domains" when local 
> filenames are used.  e.g.
>
>       <frame src="ExtendedSSLSession.java.lhs.html" ... />
>       <frame src="ExtendedSSLSession.java.rhs.html" ... />
>
>     </frameset>
>             <frameset rows="60, 30">
>               <frame src="../../../../../../../ancnav.html"
>
> Thanks,
>
> Brad
>
>
>
>
>
> On 8/11/2015 5:15 PM, Bradford Wetmore wrote:
>> Correction:  it does not completely work on IE after all.  My apologies:
>>   I thought I saw it working, but apparently I used the wrong URL.
>>
>> "Scroll Up" and "Scroll Down" work fine, but when I click on "BOF",
>> "EOF", "Prev Diff", "Next Diff", it displays:
>>
>> ---begin---
>>      This page can't be displayed
>>
>>      •Make sure the web address is correct.
>>      •Look for the page with your search engine.
>>      •Refresh the page in a few minutes.
>> ---end---
>>
>> on both the LHS and RHS.
>>
>> Brad
>>
>>
>>
>> On 8/11/2015 5:05 PM, Bradford Wetmore wrote:
>>>
>>> Here is a long-standing bug that still bites me and was hoping someone
>>> with javascript smarts might have a suggestion.
>>>
>>> I'm on Windows 7 + cygwin + Firefox.  On the generated webrev, if I try
>>> to use Frames on my local system, the navigation buttons are
>>> non-responsive.  e.g.
>>>
>>>
>>> file:///d:/java/ws/dev/jdk/8051498/webrev.04/src/java.base/share/classes/javax/net/ssl/ExtendedSSLSession.java.frames.html 
>>>
>>>
>>>
>>>
>>> However, if I use IE, or upload the cr.openjdk.java.net:
>>>
>>>
>>> http://cr.openjdk.java.net/~wetmore/8051498/webrev.04/src/java.base/share/classes/javax/net/ssl/ExtendedSSLSession.java.frames.html 
>>>
>>>
>>>
>>>
>>> I have no problems with navigation.
>>>
>>> Only Firefox fails.  My workaround are IE or uploading, but I have some
>>> nice extras in Firefox that I miss.
>>>
>>> Any suggestions?
>>>
>>> Brad
>>>



More information about the webrev-dev mailing list