[Webkit-unassigned] [Bug 15100] New: XMLHttpRequest::urlMatchesDocumentDomain raises error if port information does not match exactly

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15100

           Summary: XMLHttpRequest::urlMatchesDocumentDomain raises error if
                    port information does not match exactly
           Product: WebKit
           Version: 522+ (nightly)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P3
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: christian.mittendorf at freenet.de


The framework that we are using creates Ajax links where it adds the port to an
URL. As an example, a site runs under "https://www.foo.com" and the
automatically generated JavaScript link looks like
"https://www.fool.com:443/Bar/app?abc=123". The current WebCore (Rev 25269)
XMLHttpRequest does refuse to make this request with an "Access denied" error
because the site url does not include the explicit port information
("documentURL.port() == url.port()" is false). In my example the
documentURL.port() would be 0 and url.port() would be 443. Although using https
without any specific port would result in using port 443 anyway. IE and Firefox
do allow these links and perform the Ajax request without an error.

I would suggest to either remove the test that the port must match in both urls
or to add more logic to the test method "bool
XMLHttpRequest::urlMatchesDocumentDomain(const KURL& url) const" in
/WebKit/WebCore/xml/XMLHttpRequest.cpp.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.