xles / hyphenator

Automatically exported from code.google.com/p/hyphenator
GNU General Public License v3.0
0 stars 0 forks source link

Security Error on Firefox #164

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. With Firefox (v11) and running hyphenator.js right when I access the URL of 
my website there comes this error message: 

"Hyphenator.js says:
An Error occurred:
Security error"

You can click away the message and the site is running, obviously without 
hyphenated text.

What version of the product are you using? On what operating system?
I use MacOSX 10.6, I tried Firefox 10-14 with Hyphenator 4.0. Never working.

Please provide any additional information below.
No problems  on Safari and google Chrome.

Original issue reported on code.google.com by hello%ma...@gtempaccount.com on 8 Aug 2012 at 12:06

GoogleCodeExporter commented 9 years ago
Also error in Opera and IE.
http://jsfiddle.net/NJpax/1/

But it will say:
Opera12: security error attempted to read protected variable
IE: Access denied.
FF15: The operation is insecure.

In the example above I think it is conflicting with AddThis's Utility Frame.
Might also be something related to the localStorage: 
https://bugzilla.mozilla.org/show_bug.cgi?id=762409

Original comment by bonnabr...@hotmail.com on 6 Sep 2012 at 8:49

GoogleCodeExporter commented 9 years ago
Looks like there's an issue when reading css.style sheets (line 797). Need to 
check this out

Original comment by mathiasn...@gmail.com on 8 Sep 2012 at 10:00

GoogleCodeExporter commented 9 years ago
I had the same issue on FF 15.0.1 on MacOS X 10.8.2

When creating the file, try to select the option 
"Use the in-browser CSS3 hyphenation if available." 
And eventually "Overwrite onerrorhandler".

Original comment by f.i.wits...@gmail.com on 24 Sep 2012 at 2:11

GoogleCodeExporter commented 9 years ago
Now I can't reproduce this anymore.

Original comment by mathiasn...@gmail.com on 26 Sep 2012 at 8:37

GoogleCodeExporter commented 9 years ago
I also have that issue. Without addthis it works as expected. but with addthis 
it fails as above. any ideas?

Original comment by land...@gmail.com on 5 Nov 2012 at 3:20

GoogleCodeExporter commented 9 years ago
fixed in r1128

The problem was a security error in FF due to the same origin policy when 
accessing cssRules of an external stylesheet.

Original comment by mathiasn...@gmail.com on 11 Nov 2012 at 3:46

GoogleCodeExporter commented 9 years ago
Same problem here, with latest version
could you post how to solve this please?
thank you in advance

Original comment by aja...@gmail.com on 30 Jan 2013 at 2:30

GoogleCodeExporter commented 9 years ago
The bug is still there in r1143

Original comment by subjunk on 8 Feb 2013 at 3:31

GoogleCodeExporter commented 9 years ago

Original comment by mathiasn...@gmail.com on 17 Feb 2013 at 11:33

GoogleCodeExporter commented 9 years ago
OK
I think this is fixed now in r1147.

The problem was that FF can not write to external StyleSheets due to the same 
origin policy.
Hyphenator.js now searches an accessible stylesheet or creates one.

Original comment by mathiasn...@gmail.com on 17 Feb 2013 at 4:55

GoogleCodeExporter commented 9 years ago

Original comment by mathiasn...@gmail.com on 17 Feb 2013 at 4:55

GoogleCodeExporter commented 9 years ago
This issue appears to have reoccured.  I am using version 4.1 and Firefox 
23.0.1.  I'm receiving the same error message as listed above.

Original comment by Brent.C....@gmail.com on 25 Sep 2013 at 10:00

GoogleCodeExporter commented 9 years ago
I also got the error in Firefox on MacOS and Windows.
Any solutions?

Thanks!
florian

Original comment by fra...@madein.io on 2 Oct 2013 at 7:19

GoogleCodeExporter commented 9 years ago
OK, not fixed!

Security errors occur when Hyphenator.js tries to hyphenate a iframe that comes 
from a different origin (e.g. a facebook button).

Please send me a link to a website where I can see this error. This will help a 
lot to reproduce the error (and hopefully fix Hyphenator.js)

Mathias

Original comment by mathiasn...@gmail.com on 2 Oct 2013 at 10:05

GoogleCodeExporter commented 9 years ago
Hello,
you should check that you have set lang attribute to HTML tag.
Like this:
<html xmlns="http://www.w3.org/1999/xhtml" lang="fi">

I got this error if it was set empty, like this:
<html xmlns="http://www.w3.org/1999/xhtml" lang="">

Original comment by tommi.he...@gmail.com on 20 Dec 2013 at 1:26

GoogleCodeExporter commented 9 years ago
I have the same issue. I try to add the lang attribute but I doesn't help.
Tested in Firefox 26.0 on Linux.
Here is the header:

<!DOCTYPE html> 
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1" />

Original comment by tryfl...@gmail.com on 7 Jan 2014 at 3:22

GoogleCodeExporter commented 9 years ago
I'm using Hyphenator 4.1.0.
If I switch to "use Hyphenator.js from developer trunk", the security error is 
gone and the site is hyphenated. So I guess it is fixed in the trunk? Can I 
just replace the JavaScript file from trunk?

Original comment by tryfl...@gmail.com on 7 Jan 2014 at 3:27

GoogleCodeExporter commented 9 years ago
Yes

Original comment by mathiasn...@gmail.com on 25 Sep 2014 at 2:52