Drag&Drop in iframe = XSS problem

[ashensugarParticipant]

Hi everyone, I’m using a JqxTree with drag&drop functionnality, and my tree is wrapped inside a JqxWindow.

Everything works fine until I launch the page from a different domain inside an iframe.

Classic ajax using works well inside the iframe (i can do $.get(…) or $.post(…) without any problem, and my JqxGrid works fine too).

Databinding my jqxTree (with drag&drop) throws an error in any navigator:

Error: Permission denied to access property ‘document’ (Firefox)

This error comes from jqxdragdrop on column around n°3800 :

...
if(window.top.document.addEventListener){window.top.document.addEventListener("mouseup",c,false)}else{if(window.top.document.attachEvent){window.top.document.attachEvent("onmouseup",c)}
...

This portion of code tries to access window.top.document property, which we can’t reach because of xss protection of navigators i think.

Sorry to cause trouble ^^ but I searched a lot and can’t find anyone with the same problem.

What do you think about that ? did you notice it already ? can we eventually modify dragdrop.js to fit in an iframe of different domain without problem ?

Any advice would be greatly appreciated.

Thanks

[DimitarParticipant]

Hello ashensugar,

Thank you for your feedback. We will fix the reported issue as soon as possible.

Best Regards,
Dimitar

jQWidgets team
http://www.jqwidgets.com/

[ashensugarParticipant]

Hello Dimitar,

Happy if i can help. Thanks for the reply.

Have a nice day !

[Author]

Posts