security error in firefox 39

JangoSteve / remotipart

Rails jQuery file uploads via standard Rails "remote: true" forms.

http://os.alfajango.com/remotipart

Other

1k stars 215 forks source link

security error in firefox 39 #132

Closed benevolentmadman closed 9 years ago

benevolentmadman commented 9 years ago

When I test this in Safari, it all works as planned, but when I test in firefox, after a successful upload, I get this in the firefox security log: Error: Permission denied to access property "document" in jquery.iframe-transport.js line 190

benevolentmadman commented 9 years ago

I found the issue, and it's my code, not remotipart.

I had a global X-Frame-Options header set that was triggering the warning. I removed that header from the specific requests that were giving me trouble using this technique:

http://stackoverflow.com/questions/18445782/how-to-override-x-frame-options-for-a-controller-or-action-in-rails-4