4343 2005-08-08 18:14:33 -0700 XMLHttpRequest doesn't work in a JavaScript-created window 2009-03-03 08:46:59 -0800 1 1 1 Unclassified WebKit XML 420+ Mac OS X 10.4 RESOLVED FIXED P2 Major --- 1 jacob ap abarth bugs-webkit ian oldest_to_newest 16232 0 jacob 2005-08-08 18:14:33 -0700 The following page creates an XMLHttpRequest object, makes a request to Google, and displays its progress in alerts: <html><body><script type="text/javascript"> var req = new XMLHttpRequest(); req.onreadystatechange = result; req.open("GET", "http://www.google.com", true); req.send(); function result() {alert(req.responseText);} </script></body></html> This works fine in Safari. However, it's also possible to use JavaScript to write to a new browser window, and it can even write JavaScript into the window. This also works in Safari. However, if we use JavaScript to write the above code, the XMLHttpRequest never gets sent. For example: <html><body><script type="text/javascript"> winRef=window.open(); winRef.document.writeln("<html><body><script type=\"text/javascript\">"); winRef.document.writeln("var req = new XMLHttpRequest();"); winRef.document.writeln("req.onreadystatechange = result;"); winRef.document.writeln("req.open(\"GET\", \"http://www.google.com\", true);"); winRef.document.writeln("req.send();"); winRef.document.writeln("function result() {alert(req.responseText);}"); winRef.document.writeln("<\/script></body></html>"); winRef.document.close(); </script></body></html> 26418 1 ap 2005-12-23 02:53:40 -0800 The problem here is that the created document has an about:blank URL, so it isn't considered a local file, and isn't allowed to use XMLHttpRequest. 26419 2 5244 ap 2005-12-23 02:55:12 -0800 Created attachment 5244 test case Safari: winRef.document.URL: file:///Users/ap/Desktop/4343.html document.URL: about:blank Firefox 1.5: winRef.document.URL: about:blank document.URL: file:///Users/ap/Desktop/4343.html 27477 3 ap 2006-01-02 02:59:50 -0800 See also: bug 5292. 111982 4 ap 2009-03-03 02:50:46 -0800 This was fixed in <http://trac.webkit.org/projects/webkit/changeset/34506> and related check-ins. Looks like this exact scenario doesn't have a test yet, so I'll make a patch to land a test for XHR from a pop-up window. 111983 5 28218 ap 2009-03-03 02:59:37 -0800 Created attachment 28218 test case for landing 111987 6 28218 aroben 2009-03-03 07:26:37 -0800 Comment on attachment 28218 test case for landing r=me 112000 7 ap 2009-03-03 08:46:59 -0800 Committed revision 41382. 5244 2005-12-23 02:55:12 -0800 2005-12-23 02:55:12 -0800 test case 4343.html text/html 366 ap PGh0bWw+PGJvZHk+PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgp3aW5SZWY9d2luZG93 Lm9wZW4oKTsKYWxlcnQoIndpblJlZi5kb2N1bWVudC5VUkw6ICIgKyB3aW5SZWYuZG9jdW1lbnQu VVJMKTsKd2luUmVmLmRvY3VtZW50LndyaXRlbG4oIjxodG1sPjxib2R5PjxzY3JpcHQgdHlwZT1c InRleHQvamF2YXNjcmlwdFwiPiIpOwp3aW5SZWYuZG9jdW1lbnQud3JpdGVsbigiYWxlcnQoXCJk b2N1bWVudC5VUkw6IFwiICsgZG9jdW1lbnQuVVJMKTsiKTsKd2luUmVmLmRvY3VtZW50LndyaXRl bG4oIjxcL3NjcmlwdD48L2JvZHk+PC9odG1sPiIpOwp3aW5SZWYuZG9jdW1lbnQuY2xvc2UoKTsK PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4K 28218 2009-03-03 02:59:37 -0800 2009-03-03 07:26:37 -0800 test case for landing XHRFromPopup.txt text/plain 3047 ap SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDQxMzc5KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMTUgQEAKKzIwMDktMDMtMDMgIEFsZXhleSBQcm9za3VyeWFr b3YgIDxhcEB3ZWJraXQub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEp LgorCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD00MzQz CisgICAgICAgIFhNTEh0dHBSZXF1ZXN0IGRvZXNuJ3Qgd29yayBpbiBhIEphdmFTY3JpcHQtY3Jl YXRlZCB3aW5kb3cKKworICAgICAgICBUaGUgcHJvYmxlbSB3YXMgZml4ZWQgYSB3aGlsZSBhZ28g KHIzNDUwNiksIGp1c3QgYWRkaW5nIGEgdGVzdC4KKworICAgICAgICAqIGh0dHAvdGVzdHMveG1s aHR0cHJlcXVlc3QvcmVxdWVzdC1mcm9tLXBvcHVwLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAg ICAgICogaHR0cC90ZXN0cy94bWxodHRwcmVxdWVzdC9yZXF1ZXN0LWZyb20tcG9wdXAuaHRtbDog QWRkZWQuCisKIDIwMDktMDMtMDIgIFNpbW9uIEZyYXNlciAgPHNpbW9uLmZyYXNlckBhcHBsZS5j b20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgQWRlbGUgUGV0ZXJzb24KSW5kZXg6IExheW91dFRl c3RzL2h0dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvcmVxdWVzdC1mcm9tLXBvcHVwLWV4cGVjdGVk LnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0 L3JlcXVlc3QtZnJvbS1wb3B1cC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRU ZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L3JlcXVlc3QtZnJvbS1wb3B1cC1leHBlY3Rl ZC50eHQJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMyBAQAorVGVzdCBmb3IgYnVnIDQzNDM6IFhN TEh0dHBSZXF1ZXN0IGRvZXNuJ3Qgd29yayBpbiBhIEphdmFTY3JpcHQtY3JlYXRlZCB3aW5kb3cu CisKK1NVQ0NFU1MKClByb3BlcnR5IGNoYW5nZXMgb246IExheW91dFRlc3RzL2h0dHAvdGVzdHMv eG1saHR0cHJlcXVlc3QvcmVxdWVzdC1mcm9tLXBvcHVwLWV4cGVjdGVkLnR4dApfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Ck5hbWU6IHN2bjptaW1lLXR5cGUKICAgKyB0ZXh0L3BsYWluCk5hbWU6IHN2bjplb2wtc3R5bGUK ICAgKyBuYXRpdmUKCkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0 L3JlcXVlc3QtZnJvbS1wb3B1cC5odG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAv dGVzdHMveG1saHR0cHJlcXVlc3QvcmVxdWVzdC1mcm9tLXBvcHVwLmh0bWwJKHJldmlzaW9uIDAp CisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L3JlcXVlc3QtZnJvbS1w b3B1cC5odG1sCShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDI0IEBACis8aHRtbD48Ym9keT4KKzxw PlRlc3QgZm9yIDxhIGhyZWY9Imh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD00MzQzIj5idWcgNDM0MzwvYT46CitYTUxIdHRwUmVxdWVzdCBkb2Vzbid0IHdvcmsgaW4gYSBK YXZhU2NyaXB0LWNyZWF0ZWQgd2luZG93LjwvcD4KKzxwIGlkPXJlc3VsdD5GQUlMPC9wPgorPHNj cmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgoraWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJv bGxlcikgeworICAgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgICBsYXlv dXRUZXN0Q29udHJvbGxlci5zZXRDYW5PcGVuV2luZG93cygpOworICAgIGxheW91dFRlc3RDb250 cm9sbGVyLndhaXRVbnRpbERvbmUoKTsKK30KKword2luUmVmPXdpbmRvdy5vcGVuKCk7CitpZiAo IXdpblJlZikKKyAgICBhbGVydCgiUG9wdXAgd2luZG93IGNvdWxkIG5vdCBiZSBvcGVuZWQsIHBs ZWFzZSBkaXNhYmxlIHBvcC11cCBibG9ja2VyIik7CisKK3dpblJlZi5kb2N1bWVudC53cml0ZWxu KCI8aHRtbD48Ym9keT48c2NyaXB0IHR5cGU9J3RleHQvamF2YXNjcmlwdCc+Iik7Cit3aW5SZWYu ZG9jdW1lbnQud3JpdGVsbigidmFyIHJlcSA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyIpOword2lu UmVmLmRvY3VtZW50LndyaXRlbG4oInJlcS5vbnJlYWR5c3RhdGVjaGFuZ2UgPSByZXN1bHQ7Iik7 Cit3aW5SZWYuZG9jdW1lbnQud3JpdGVsbigicmVxLm9wZW4oJ0dFVCcsICdyZXF1ZXN0LWZyb20t cG9wdXAuaHRtbCcsIHRydWUpOyIpOword2luUmVmLmRvY3VtZW50LndyaXRlbG4oInJlcS5zZW5k KG51bGwpOyIpOword2luUmVmLmRvY3VtZW50LndyaXRlbG4oImZ1bmN0aW9uIHJlc3VsdCgpIHsg aWYgKHJlcS5yZWFkeVN0YXRlID09IDQpIHsgb3BlbmVyLmRvY3VtZW50LmdldEVsZW1lbnRCeUlk KCdyZXN1bHQnKS5pbm5lckhUTUw9J1NVQ0NFU1MnOyBpZiAob3BlbmVyLmxheW91dFRlc3RDb250 cm9sbGVyKSBvcGVuZXIubGF5b3V0VGVzdENvbnRyb2xsZXIubm90aWZ5RG9uZSgpOyB3aW5kb3cu Y2xvc2UoKTsgfSB9Iik7Cit3aW5SZWYuZG9jdW1lbnQud3JpdGVsbigiPFwvc2NyaXB0PjxcL2Jv ZHk+PFwvaHRtbD4iKTsKK3dpblJlZi5kb2N1bWVudC5jbG9zZSgpOworPC9zY3JpcHQ+PC9ib2R5 PjwvaHRtbD4KClByb3BlcnR5IGNoYW5nZXMgb246IExheW91dFRlc3RzL2h0dHAvdGVzdHMveG1s aHR0cHJlcXVlc3QvcmVxdWVzdC1mcm9tLXBvcHVwLmh0bWwKX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOYW1lOiBzdm46 bWltZS10eXBlCiAgICsgdGV4dC9odG1sCgo=