Bug #91270
closed
ContextHelp.js: Uncaught DOMException: Blocked a frame with origin "http://localhost" from accessing a cross-origin frame.
100%
Description
Hi,
when using typo3 v10.4.0 with Chrome I am getting an "Uncaught DOMException: Blocked a frame with origin "http://localhost" from accessing a cross-origin frame." already for bringing up the initial logon screen. it comes again after logon:
ContextHelp.js?bust=bd966a94047fa0fd0ce42f4c9226f3fdec31b627:13 Uncaught DOMException: Blocked a frame with origin "http://localhost" from accessing a cross-origin frame.
at s.initialize (http://localhost/km/typo3/sysext/backend/Resources/Public/JavaScript/ContextHelp.js?bust=bd966a94047fa0fd0ce42f4c9226f3fdec31b627:13:404)
at new s (http://localhost/km/typo3/sysext/backend/Resources/Public/JavaScript/ContextHelp.js?bust=bd966a94047fa0fd0ce42f4c9226f3fdec31b627:13:242)
at Object.<anonymous> (http://localhost/km/typo3/sysext/backend/Resources/Public/JavaScript/ContextHelp.js?bust=bd966a94047fa0fd0ce42f4c9226f3fdec31b627:13:2205)
at Object.execCb (http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:16788)
at i.check (http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:10519)
at i.<anonymous> (http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:12962)
at http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:1544
at http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:13430
at each (http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:1020)
at i.emit (http://localhost/km/typo3temp/assets/compressed/require-cc8b88c5ce2859197c8f05b91a61c71d.js:5:13397)
logon works nevertheless.
Best regards
Eckard.
Files
Updated by Andreas Kienast over 4 years ago
- Status changed from New to Accepted
I can confirm the issue as follows (with ddev):
- Be logged out off the backend
- Request a new password by using the "Forgot password" feature
- Head to mailhog (runs on port 8025) and click the opt-in link
- Now the console reports the mentioned issue
For some reason the issue is sometimes gone when I reload the windows using F5 (or alike), navigating doesn't solve it.
Updated by Andreas Kienast over 4 years ago
- Related to Bug #91205: Backend content iFrame breaks with setting [BE][cookieSameSite]="lax" because ContextHelp.js uses "use strict" added
Updated by Andreas Kienast over 4 years ago
- Status changed from Accepted to In Progress
Updated by Gerrit Code Review over 4 years ago
- Status changed from In Progress to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64394
Updated by Gerrit Code Review over 4 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64394
Updated by Gerrit Code Review over 4 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64394
Updated by Georg Ringer over 4 years ago
- Related to Bug #91262: V10.4 backend does not work any more with chrome browser added
Updated by Oliver Hader over 4 years ago
- Related to Bug #80665: CSH on popup window - more link leads to non-existent page added
Updated by Oliver Hader over 4 years ago
- Related to Task #90995: Integrate Cross-Origin-Opener-Policy HTTP header in backend added
Updated by Oliver Hader over 4 years ago
@Eckard Gehrke: Please execute both commands in browser console and tell use the shown results
window.opener.document.location; window.opener.top.document.location;
And if you could add a screenshot showing the whole backend with the error messages in the console would be great.
Thx!
Updated by Eckard Gehrke over 4 years ago
- File typo3Backend.jpg typo3Backend.jpg added
The result is for both commands the same:
Uncaught DOMException: Blocked a frame with origin "http://localhost" from accessing a cross-origin frame.
at <anonymous>:1:19
(anonymous) @ VM223:1
I have added a screenshot.
The other ticket with the contexthelp seems now to be solved with 10.4.2.dev will update that later after checking again.
Updated by Oliver Hader over 4 years ago
How to reproduce:
- e.g. having a link on some cross-origin site (or bookmarklet) opening the backend
<a href="http://example.org/typo3/" target="_blank">Backend</a>
- e.g. having a
window.openaction
window.open('http://example.org/typo3/')
Updated by Gerrit Code Review over 4 years ago
Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64404
Updated by Gerrit Code Review over 4 years ago
Patch set 2 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64404
Updated by Andreas Fernandez over 4 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset b7a05352f2956ece6818ab7de7bb022de8d50e7b.
Updated by 