Opened 4 years ago

Closed 4 years ago

#12812 closed Bug (fixed)

Security error is thrown because lineutils constructor tries to access outer frame

Reported by: Piotrek Koszuliński Owned by:
Priority: Normal Milestone: CKEditor 4.4.7
Component: General Version: 4.3
Keywords: Cc:

Description (last modified by Piotrek Koszuliński)

Based on https://github.com/ckeditor/ckeditor-dev/pull/153

It's easiest to reproduce by loading such file from http://ckeditor.dev:

<!DOCTYPE html>
<html>
<head>
	<meta charset="utf-8">
	<title>Foo</title>
</head>
<body>
	<iframe src="http://sub.ckeditor.dev/ckeditor-dev/plugins/image2/dev/image2.html" width="1200" height="500"></iframe>
</body>

Change History (3)

comment:1 Changed 4 years ago by Piotrek Koszuliński

Status: newconfirmed

I was able to reproduce this error on Chrome and Safari, but not on Firefox.

comment:2 Changed 4 years ago by Piotrek Koszuliński

Description: modified (diff)

comment:3 Changed 4 years ago by Piotrek Koszuliński

Milestone: CKEditor 4.4.7
Resolution: fixed
Status: confirmedclosed

Fixed on master with git:33557ff.

Note: See TracTickets for help on using tickets.
© 2003 – 2017 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy