Opened 3 years ago

Last modified 3 years ago

#9073 confirmed Bug

ImageUpload callback can not be called cross-domain.

Reported by: Enzo90910 Owned by:
Priority: Normal Milestone:
Component: File Browser Version: 3.0
Keywords: Cc:


When using filebrowserImageUploadUrl, CKEditor creates an iframe and loads the given filebrowserImageUploadUrl as the source for the iframe. It is my understanding that the HTML loaded in the iFrame is then supposed to execute a Javascript looking like this:, uploadedImageUrl, sucessMessage);

The problem is that when filebrowserImageUploadUrl is not on the same domain as the originalPage, browsers absolutely refuse the javascript to access window.parent.CKEDITOR, and the callback is never called back. If I analyzed the problem correclty, this could probably be made to work by creating a <script> tag instead of an <iframe>, in which case there is no cross-domain problem.

Change History (1)

comment:1 Changed 3 years ago by j.swiderski

  • Component changed from General to File Browser
  • Status changed from new to confirmed
  • Version set to 3.0

We are aware of this problem but this will be done with window.postMessage (E.g. and not with scripts.

Note: See TracTickets for help on using tickets.
© 2003 – 2015 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy