id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
12767	this.win.getFrame() cross domain security exception (lineutils plugin)	Steven		"Situation:

Create a custom build with CKbuilder that includes plugin 'lineutils' '''OR''' just download a package and include the lineutils plugin via config (there might be other plugins creating this error as well). Lineutils is a plugin required by many other plugins.

domain1.com/index.html 
initiate CKeditor (I used inline but same problem should happen with normal editor as well I think)

domain2.com
Create iframe to load domain1.com/index.html

This will create uncaught security exception:

{{{
Uncaught SecurityError: Failed to read the 'frame' property from 'Window': Blocked a frame with origin ""domain1"" from accessing a frame with origin ""domain2"". Protocols, domains, and ports must match.

CKEDITOR.tools.extend.getFrameckeditor.js:951 kckeditor.js:980 (anonymous function)ckeditor.js:10 ickeditor.js:12

CKEDITOR.event.CKEDITOR.event.fireckeditor.js:13

CKEDITOR.editor.CKEDITOR.editor.fireckeditor.js:314 (anonymous function)ckeditor.js:10 ickeditor.js:12

CKEDITOR.event.CKEDITOR.event.fireckeditor.js:13

CKEDITOR.editor.CKEDITOR.editor.fireckeditor.js:12

CKEDITOR.event.CKEDITOR.event.fireOnceckeditor.js:13

CKEDITOR.editor.CKEDITOR.editor.fireOnceckeditor.js:241 (anonymous function)ckeditor.js:221 mckeditor.js:221

CKEDITOR.scriptLoader.loadckeditor.js:240 (anonymous function)ckeditor.js:228 (anonymous function)ckeditor.js:226 (anonymous function)ckeditor.js:221 mckeditor.js:221

CKEDITOR.scriptLoader.loadckeditor.js:226

CKEDITOR.resourceManager.loadckeditor.js:227 hckeditor.js:228 (anonymous function)ckeditor.js:239 mckeditor.js:238 (anonymous function)ckeditor.js:445 (anonymous function)ckeditor.js:226 (anonymous function)ckeditor.js:221 mckeditor.js:221 tckeditor.js:221 sckeditor.js:222 (anonymous function)
}}}


This is the function inside lineutils plugin that causes the problem:

{{{
    function Finder( editor, def ) {
        CKEDITOR.tools.extend( this, {
            editor: editor,
            editable: editor.editable(),
            doc: editor.document,
            win: editor.window
        }, def, true );

        this.frame = this.win.getFrame();
        this.inline = this.editable.isInline();
        this.target = this[ this.inline ? 'editable' : 'doc' ];
    }
}}}

This traces back to line 65 in ckeditor.js (minified version)

A solution I now quickly implemented is:

{{{
	function Finder( editor, def ) {
		CKEDITOR.tools.extend( this, {
			editor: editor,
			editable: editor.editable(),
			doc: editor.document,
			win: editor.window
		}, def, true );

		var a = false;
		try{
			a = this.win.getFrame();
		}catch(e){/*console.log('getframe error:');console.log(editor);console.log(def);*/}
		
		this.frame = a;
		this.inline = this.editable.isInline();
		this.target = this[ this.inline ? 'editable' : 'doc' ];
	}
}}}

I have no idea how viable this solution is, it removed the error however I'm not completely sure how/what/where the 'this.frame' is used."	Bug	closed	Normal		General	4.3 Beta	duplicate