Bug 27313 – REGRESSION: Most orkut.com links do nothing

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: WebCore Misc.

[Gustavo Noronha (kov)]

To reproduce, login to orkut and try to click a link such as 'Scrap book'.

[Gustavo Noronha (kov)]

I forgot to say that I tried disabling the XSS auditor, and that makes it work again.

[Adam Barth]

Thanks for the report.  I'll take a look.

[Adam Barth]

Neither Dan nor I am able to reproduce this issue.  Can you try again with the latest nightly?

r45934.dmg">http://builds.nightly.webkit.org/files/trunk/mac/WebKit-SVN-r45934.dmg

[Gustavo Noronha (kov)]

Hrm. I built the latest trunk, and I seem to get the same bad behavior with XSS auditor disabled now, after clicking one link that works, all the other clicks do nothing. Not sure what to do with the bug, since it does seem like the XSS auditor is not the cause, but I didn't figure out what is the problem I'm seeing. Thanks for looking.

[Adam Barth]

Are you able to reproduce the issue with the Mac or Windows port (these are the ports that Dan and I tried)?  I can't tell from your description whether the issue is port-specific.

[Adam Barth]

Also, if you can build WebKit, it would be helpful to narrow down the regression window.

[Gustavo Noronha (kov)]

(In reply to comment #6)
> Also, if you can build WebKit, it would be helpful to narrow down the
> regression window.

I will try to bisect it, sure. I don't really have a Mac or a Windows machine here at this time, though, but I may be able to get hold of one during the weekend.

[Gustavo Noronha (kov)]

I could not find that a specific commit broke it, yet. What I did notice was that if I am quick enough clicking the links, they work fine, but if I let the page load completely, they fail. It seems to be related to the 'chat'.

These are the messages I see in Web Inspector's console:

Unsafe JavaScript attempt to access frame with URL http://www.orkut.com/Main#Home.aspx from frame with URL http://talkgadget.google.com/talkgadget/mole?id=gth-hover-card&css=http%3A%2F%2Fstatic4.orkut.com%2Fcss%2Ftalk%2Fgen%2Froster002.css&hl=en-US#id=gth-hover-card. Domains, protocols and ports must match.

Unsafe JavaScript attempt to access frame with URL http://www.orkut.com/Main#Home.aspx from frame with URL http://talkgadget.google.com/talkgadget/blank. Domains, protocols and ports must match.

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/test?clid=78BF91E403386B42&zd=mg&VER=6&MODE=init&zx=8zzoei-il5xuf&t=1".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/test?clid=78BF91E403386B42&zd=mg&VER=6&TYPE=xmlhttp&zx=ffi3f5-zex8av&t=1".

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=90206&CVER=1&zx=a7yu63-7pesiy&t=1".
talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/msg?clid=78BF91E403386B42&zd=mg&zx=l4igp5-ypre2v".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/msg?clid=78BF91E403386B42&zd=mg&zx=u1cb9h-s17lwo".

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&SID=F9BEAB250BF3BD05&RID=90207&zx=h7yzno-jimb49&t=1".

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=0&TYPE=xmlhttp&zx=y3m47q-j62ty9&t=1".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/msg?clid=78BF91E403386B42&zd=mg&zx=85tbmy-agspz9".

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=15&TYPE=xmlhttp&zx=z9an7i-2zz52t&t=1".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/msg?clid=78BF91E403386B42&zd=mg&zx=ceg4id-q7qz5l".

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=16&TYPE=xmlhttp&zx=qbs25x-bga5jr&t=1".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=30&TYPE=xmlhttp&zx=ek3hw9-nt7sn1&t=1".

Refused to set unsafe header "Connection"

/Home.aspx:28Unmatched </base> encountered.  Ignoring tag.

Unsafe JavaScript attempt to access frame with URL http://www.orkut.com/Home.aspx from frame with URL http://googleads.g.doubleclick.net/pagead/ads?client=ca-google-orkut&dt=1247851788630&gl=GB&adsafe=high&format=250x250_as&num_ads=3&output=html&correlator=1247851788630&channel=home%20ben%20home_user_computers_and_internet%20gender_male%20age_25_to_34%20home_user_arts_and_entertainment&url=http%3A%2F%2Fwww.orkut.com%2FHome.aspx&color_bg=ffffff&color_text=000000&color_link=02679c&color_border=ffffff&color_line=ffffff&f=verdana&ad_type=text,staticimage&image_size=250x250&ea=0&ref=http%3A%2F%2Fwww.orkut.com%2FMain&loc=http%3A%2F%2Fwww.orkut.com%2FHome.aspx&frm=0&cust_l=16705659838416067498&cust_lh=2&uiv=1&ga_vid=373715786.1247851789&ga_sid=1247851789&ga_hid=1921413478&flash=10.0.22&w=250&h=250&u_h=800&u_w=1280&u_ah=775&u_aw=1280&u_cd=24&u_tz=60&u_his=5&u_nplug=2&u_nmime=4&dtd=130. Domains, protocols and ports must match.

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=32&TYPE=xmlhttp&zx=8gef6z-p7xg2q&t=1".

Refused to set unsafe header "Connection"

talkgadget.google.com/talkgadget/sp/4111723421-notifierclient-js.js:66XHR finished loading: "http://talkgadget.google.com/talkgadget/channel/bind?clid=78BF91E403386B42&zd=mg&VER=6&RID=rpc&SID=F9BEAB250BF3BD05&CI=1&AID=34&TYPE=xmlhttp&zx=9djxfw-r84gzj&t=1".

Refused to set unsafe header "Connection"

[Adam Barth]

I see similar error spew on the inspector.  I tried waiting for the page to completely load using the latest Mac nightly, but I was unable to reproduce the issue.  I think your best bet is to start bisecting builds and find the regressing commit.

[Adam Barth]

Please re-open if you have additional information.