Skip to main content

Bug Tracker

Side navigation

#8136 closed bug (duplicate)

Opened February 02, 2011 09:48AM UTC

Closed February 02, 2011 11:56AM UTC

Last modified February 02, 2011 11:57AM UTC

$.aiax() internal exception

Reported by: paolo.marani@engineering.it Owned by:
Priority: high Milestone: 1.next
Component: ajax Version: 1.5
Keywords: Cc:
Blocked by: Blocking:
Description

$.ajax() is seriously flawed after the 1.4.3 rewrite !!!

Please find this line in jQuery 1.5:

=

protocol = loc.protocol || "http:",

=

protocol property may be WRITEONLY, thus this will generate an uncaught exception (access denied) even without a cross-site domain attempts.

effectively, 'document.location.protocol' is not always safe to read, so it's better to completely error protect that line.

We have lost days tracking down this nasty problem.

Please fix it !!!!! Please fix it !!!!! Please fix it !!!!!

Attachments (0)
Change History (4)

Changed February 02, 2011 09:49AM UTC by anonymous comment:1

Sorry, the double pipe appear to be interpreted as special code in this editor, i'll try to rewrite the offending line using code blocks

protocol = loc.protocol || "http:",

Changed February 02, 2011 10:14AM UTC by marantz comment:2

Duplicate of Ticket #8138

Changed February 02, 2011 11:56AM UTC by jitter comment:3

component: unfiledajax
priority: undecidedhigh
resolution: → duplicate
status: newclosed

Changed February 02, 2011 11:57AM UTC by jitter comment:4

Duplicate of #8138.