Page MenuHomePhabricator

Document's frame is sandboxed
Closed, DuplicatePublic

Description

Hello,

I am getting errors in browser's javascript console when I want to submit a form (for example on edit or preferences pages) on Commons (current version: 1.24wmf2 (rMW3dd7e54983af)):

Blocked script execution in 'https://commons.wikimedia.org/wiki/Special:Preferences' because the document's frame is sandboxed and the 'allow-scripts' permission is not set. Special:Preferences:1
Blocked form submission to 'https://commons.wikimedia.org/wiki/Special:Preferences' because the form's frame is sandboxed and the 'allow-forms' permission is not set. Special:Preferences:1

Of course, the form is not submitted then. I am using Google Chrome 34.0.1847.131 (Official Build 265687) m. The error does not appear always. When I open the page in a new tab, it can but needn't appear.


Version: 1.24rc
Severity: normal
OS: Windows Vista
Platform: PC
Whiteboard: aklapper-moreinfo

Details

Reference
bz64993

Event Timeline

bzimport raised the priority of this task from to Low.Nov 22 2014, 3:24 AM
bzimport set Reference to bz64993.
bzimport added a subscriber: Unknown Object (MLST).

Originally brought up here: https://commons.wikimedia.org/w/index.php?title=Commons:Village_pump&oldid=123394165#Document.27s_frame_is_sandboxed

I tried to reproduce with Chrome 34 on https://commons.wikimedia.org/wiki/Special:Preferences but did not succeed.

Which add-ons/extensions do you have installed in Chrome? Does this still happen after disabling them?
Could you please provide exact steps to reproduce?

(Problem can happen only in Chrome/Webkit because of https://bugs.webkit.org/show_bug.cgi?id=104365

Problem also brought up here before: https://en.wikipedia.org/wiki/Wikipedia:Village_pump_%28technical%29/Archive_124#Script_problems_with_Chrome )

I cannot reproduce it anymore. I do not know why. Just noting that the Commons' version is 1.24wmf4 now. Hopefully this will not appear again.

Thanks for retesting. Please reopen this ticket if it happens again.

Platonides subscribed.

I'm quite sure that it failed when you opened the page from OTRS (only). In this case Chrome remembers that it was asked to sandbox the page.