jquery - Unsafe JavaScript attempt to initiate navigation for frame with URL -


this bit complicated, please bear me. website has iframe contains website b , website b has iframe contain website c.

there button on website c, when clicked, want refresh url of website b. below javascript called refresh of website b website c, in iframe

function url_update(id){    var host = 'https://websiteb.com ';    var myhost = host.split('/');     if (id != "" && myhost != ""){     try {         if (id.substring(0,1) != '/'){             id = '/' + id;         }         var dft_url = myhost[0] + '//' + myhost[2] + id;         window.parent.location.href = dft_url;     } catch(e){alert("cannot go desired url location: " + dft_url);}    }   }

but when line "window.parent.location.href = dft_url;" gets executed, received following error: 

 unsafe javascript attempt initiate navigation frame url    'https://websiteb.com' frame url  'https://websitec.com'. frame attempting navigation    neither same-origin target, nor target's parent or       opener.

i don't understand why happening , how fix it. appreciated.

i did research, claimed origin problem, if take out website a, meaning have website b iframe contains website c, above code works. though have different domains

you can find explanation of behavior in comment of chromium source code. see here:

https://code.google.com/p/chromium/codesearch#chromium/src/third_party/webkit/source/core/frame/frame.cpp&sq=package:chromium&rcl=1438193817&type=cs&l=202

basically top-level windows have less restrictions regarding navigation other windows. see restrictions non top windows:

a document can navigate decendant frames, or, more generally, document can navigate frame if document in same origin of frame's ancestors (in frame hierarchy).

where top window:

specifically, document can navigate top-level frame if frame opened document or if document same-origin of top-level frame's opener's ancestors (in frame hierarchy).

reason is:

top-level frames easier navigate other frames because display urls in address bar (in browsers).

so basically, non top window, absolutely needs same origin allow navigation, top windows, frame opened window can navigate if it's not same-origin. seems problem you're facing, when b top, same origin doesn't apply, when it's not top, applies.

according this, i'm not sure there's straightforward, or @ all, solution.


Comments

Post a Comment

Popular posts from this blog

android - Pass an Serializable object in AIDL -

i have defined aidl file interface imyfeature { void dotask(class clazz); } but need pass class object process. possible in android? if so, how? i tried: interface imyfeature { serializable class; void dotask(class clazz); } but doesn’t work. aidl in android supports custom class implement parcelable interface. in case want send class object not possible. can send class canonical name , retrieve in service. for example have aidl file interface imyfeature { void dotask(string classname); } then call : binder.dotask(myclass.class.getcanonicalname()); and in service binder stub implementation : private final imyfeature mbinder = new imyfeature.stub() { public void dotask(string classname) { try { class<?> clazz = class.forname(classname); constructor<?> ctor = clazz.getconstructor((class[]) null); object object = ctor.newinstance(); ...
Read more

How to provide Authorization & Authentication using Asp.net, C#? -

Image
i have asp.net application in c#. i have provide page authorization specific user/usergroup. i have created 2 tables in database: 1) pagename 2)permissions[insert, update, view, delete] but i'm unable match tables , permissions assigning... can 1 please me, how created tables in database , how coding. please me. you can below explanation. configure access specific file , folder, set forms-based authentication. request page in application redirected logon.aspx automatically. in web.config file, type or paste following code. this code grants users access default1.aspx page , subdir1 folder . <configuration> <system.web> <authentication mode="forms" > <forms loginurl="login.aspx" name=".aspnetauth" protection="none" path="/" timeout="20" > </forms> </authentication> <!-- section denies access files in...
Read more

How to use Authorization & Authentication in Asp.net, C#? -

i using roll management , trying give page , folder access according user or user group, using server created ad group user authentication. i have default1.aspx page default , subdir1 folder give different access separate user group i using below logic in web.config. <location path="subdir1"> <system.web> <authorization> <allow users ="?" /> </authorization> </system.web> </location> i facing problem provide same access 2 or more directory same user should have provide allow user code twice both folder? i can use logic repeating value folder want access providing in 1 logic. i have got answer configure folder/page access, have make different access shown below.. configure access specific file , folder, set forms-based authentication. request page in application redirected logon.aspx automatically. in web.config file, done following code. this code grants user...
Read more