[Webkit-unassigned] [Bug 23768] New: IFrame access exceptions under try-catches still display error

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23768

           Summary: IFrame access exceptions under try-catches still display
                    error
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P3
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jschorr at gmail.com
                CC: erik.arvidsson at gmail.com


If page in domain A has a piece of Javascript code attempting to access a
member in an iframe in domain B and the access fails (as it should), an error
will be displayed in the Javascript debugger even if the call is under a
try-catch.

Steps to reproduce:

1) Create a sample page on domain A with an iframe pointing to domain B (my
example used a page on a domain A attempting to access an iframe pointing to
'about:blank' which was hosted on a page on domain B).
2) Write a piece of Javascript code in domain A that attempts to access the
iframe hosted in the page in domain B (This was found while attempting to
access the 'location' property on the window object of the 'about:blank' page)
3) Place the code under a try-catch. An exception will be raised and the code
will continue executing as expected, but the security exception will still
appear in the Javascript debugger.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.