Firefox 3 Beta tightens security of inter-frame communication

View: New views
2 Messages — Rating Filter:   Alert me  

Firefox 3 Beta tightens security of inter-frame communication

by dfabulich :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


http://forums.mozillazine.org/viewtopic.php?p=3172136&sid=dfe544704de078abd2e7b7c08da5c711

https://bugzilla.mozilla.org/show_bug.cgi?id=230606
Tighten the same-origin policy for local files (file: URLs, trusted,
security)

https://bugzilla.mozilla.org/show_bug.cgi?id=404822
[Frame] Assessing TOP window object from a frame throws permission denied
message for "file://" protocol

You can work around this by setting a FF config preference:
// Same-origin policy for file: URIs: 0=self, 1=samedir, 2=subdir, 3=anyfile
pref("security.fileuri.origin_policy", 2);

I learned about this because I'm subscribed to the JSUnit mailing list;
apparently JSUnit doesn't work from the filesystem in FF3.

http://tech.groups.yahoo.com/group/jsunit/message/1075

I'm going to guess that Selenium Core is broken in FF3 when run from the
filesystem.  Can anybody confirm?  I don't have a copy on my current box.

-Dan

---------------------------------------------------------------------
To unsubscribe, e-mail: selenium-dev-unsubscribe@...
For additional commands, e-mail: selenium-dev-help@...


Re: Firefox 3 Beta tightens security of inter-frame communication

by Bill Burcham :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I'm running the selenium server (1.0 beta 1) and can confirm that it will not start a Firefox session (3.0b4 for OS X). In interactive mode I try:

 cmd=getNewBrowserSession&1=*firefox&2=http://www.google.com

And Firefox runs but the selenium server console is hung (nonresponsive) after emitting this line:

14:29:23.960 INFO - Preparing Firefox profile...

A Safari session works just fine (with Safari 3.1).