Bug Tracker

Modify ↓

Ticket #8136 (closed bug: duplicate)

Opened 2 years ago

Last modified 2 years ago

$.aiax() internal exception

Reported by: paolo.marani@… Owned by:
Priority: high Milestone: 1.next
Component: ajax Version: 1.5
Keywords: Cc:
Blocking: Blocked by:

Description

$.ajax() is seriously flawed after the 1.4.3 rewrite !!!

Please find this line in jQuery 1.5:

====================================

protocol = loc.protocol
"http:",

====================================

protocol property may be WRITEONLY, thus this will generate an uncaught exception (access denied) even without a cross-site domain attempts.

effectively, 'document.location.protocol' is not always safe to read, so it's better to completely error protect that line.

We have lost days tracking down this nasty problem.

Please fix it !!!!! Please fix it !!!!! Please fix it !!!!!

Change History

comment:1 Changed 2 years ago by anonymous

Sorry, the double pipe appear to be interpreted as special code in this editor, i'll try to rewrite the offending line using code blocks 

protocol = loc.protocol || "http:",

comment:2 Changed 2 years ago by marantz

Duplicate of Ticket #8138

comment:3 Changed 2 years ago by jitter

  • Priority changed from undecided to high
  • Resolution set to duplicate
  • Status changed from new to closed
  • Component changed from unfiled to ajax

comment:8 Changed 2 years ago by jitter

Duplicate of #8138.

Please follow the  bug reporting guidlines and use  jsFiddle when providing test cases and demonstrations instead of pasting the code in the ticket.

View ↑

Add a comment

Modify Ticket

Action
as closed
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.