[sakai-dev] Syllabus Tool Cross-Origin issue

classic Classic list List threaded Threaded
5 messages Options
Thirumal Reddy Thirumal Reddy
Reply | Threaded
Open this post in threaded view
|

[sakai-dev] Syllabus Tool Cross-Origin issue

Hi All,
We are using this Sakai Connector, with this connector portlet we have an issue,
When we are trying to add Item in syllabus tool, popup is not opening.
If i see the logs in browser console, i got following error message,

syllabus.js:577 Uncaught DOMException: Blocked a frame with origin "http://myDomain.com" from accessing a cross-origin frame.
at showConfirmAdd (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/js/syllabus.js:577:27)
at showConfirmAddHelper (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/main:113:3)
at HTMLAnchorElement.onclick (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/main:138:71)

anybody have an idea about it..?

Please give me your suggestions.

Thanks,
Thirumal

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.
Steve Swinsburg-3 Steve Swinsburg-3
Reply | Threaded
Open this post in threaded view
|

Re: [sakai-dev] Syllabus Tool Cross-Origin issue

The Sakai connector portlet uses frames to embed the Sakai tool into another portal. It hasn't been updated for a while so newer browser security measures may be blocking it.
Do you get this with all other Sakai tools or only some? 
If only some then it may be how that tool detects and interacts with the frame.

Regards
Steve

On 10 Feb. 2018 00:08, "Thirumal Reddy" <[hidden email]> wrote:

Hi All,
We are using this Sakai Connector, with this connector portlet we have an issue,
When we are trying to add Item in syllabus tool, popup is not opening.
If i see the logs in browser console, i got following error message,

syllabus.js:577 Uncaught DOMException: Blocked a frame with origin "http://myDomain.com" from accessing a cross-origin frame.
at showConfirmAdd (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/js/syllabus.js:577:27)
at showConfirmAddHelper (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/main:113:3)
at HTMLAnchorElement.onclick (http://myDomain.com/portal/tool/f927fc8a-f2cf-41e6-a78c-c3189b3fd0e2/main:138:71)

anybody have an idea about it..?

Please give me your suggestions.

Thanks,
Thirumal

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.
Thirumal Reddy Thirumal Reddy
Reply | Threaded
Open this post in threaded view
|

Re: [sakai-dev] Syllabus Tool Cross-Origin issue

Hi Steve,

We are facing this problem not only for syllabus tool but also for other tools. 
As per our observations  wherever the below line of code is available in the sakai related JS files 
parent.document.getElementById(window.name)
the following issue coming 
Blocked a frame with origin "http://mysakaiDomain.com" from accessing a cross-origin frame.

Regards,
Thirumal.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.
Sam Ottenhoff Sam Ottenhoff
Reply | Threaded
Open this post in threaded view
|

Re: [sakai-dev] Syllabus Tool Cross-Origin issue

Your use of fake domain names makes it impossible to help solve your specific problem. You should read up on X-Frame-Options and take a look in the Sakai codebase for that string.

On Wed, Feb 28, 2018 at 2:47 AM, Thirumal Reddy <[hidden email]> wrote:
Hi Steve,

We are facing this problem not only for syllabus tool but also for other tools. 
As per our observations  wherever the below line of code is available in the sakai related JS files 
parent.document.getElementById(window.name)
the following issue coming 
Blocked a frame with origin "http://mysakaiDomain.com" from accessing a cross-origin frame.

Regards,
Thirumal.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.
Steve Swinsburg-3 Steve Swinsburg-3
Reply | Threaded
Open this post in threaded view
|

Re: [sakai-dev] Syllabus Tool Cross-Origin issue

In reply to this post by Thirumal Reddy
Yes this is standard cross origin security. I actually fixed this in a couple of places a few years ago. Tools need to check the context they are in before calling that method so that they will work in a remote IFrame.


And for the code:

On 28 Feb. 2018 21:47, "Thirumal Reddy" <[hidden email]> wrote:
Hi Steve,

We are facing this problem not only for syllabus tool but also for other tools. 
As per our observations  wherever the below line of code is available in the sakai related JS files 
parent.document.getElementById(window.name)
the following issue coming 
Blocked a frame with origin "http://mysakaiDomain.com" from accessing a cross-origin frame.

Regards,
Thirumal.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.

--
You received this message because you are subscribed to the Google Groups "Sakai Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/a/apereo.org/group/sakai-dev/.