Project

General

Profile

Actions
Copy link

Bug #91205

closed

Backend content iFrame breaks with setting [BE][cookieSameSite]="lax" because ContextHelp.js uses "use strict"

Added by Nitin Parri over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend JavaScript
Target version:
next-patchlevel
Start date:
2020-04-27
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
10
PHP Version:
7.4
Tags:
samesite, cookieSameSite, ContextHelp, use strict
Complexity:
Is Regression:
Sprint Focus:

Description

If you use any SSO method with [BE][cookieSameSite]="lax", the backend will give an error:

Blocked a frame with origin "https://domain.tld" from accessing a cross-origin frame.

It's because file /typo3/sysext/backend/Resources/Public/JavaScript/ContextHelp.js uses "use strict".

Solution:
ContextHelp.js must take over the value of setting [BE][cookieSameSite]

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Bug #91270: ContextHelp.js: Uncaught DOMException: Blocked a frame with origin "http://localhost" from accessing a cross-origin frame.Closed2020-05-02

Actions
Actions
Copy link

Also available in: Atom PDF