Problem with site...

Bug reports and enhancement requests
Post Reply
ImaginaryKaos
Posts: 1
Joined: Sun Jun 28, 2009 11:31 pm

Problem with site...

Post by ImaginaryKaos »

I'm having a problem accessing the Kawasaki parts diagrams. No matter what I do, NoScript blocks the parts diagram site from working. The only way to access these diagrams is to turn NoScript off then revisit the site. The site address is: http://www.kawasaki.com/DefaultFrame.as ... EHICLE.ASP

Select any motorcycle or product, then try and access the parts diagrams. The page just comes up with a list of errors.
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Problem with site...

Post by Giorgio Maone »

The site appears to work as soon as I allow kawasaki.com, but I couldn't find neither "parts" nor "diagrams" in any page using the Find tool.
Could you tell me where I need to click to check the parts diagram?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: Problem with site...

Post by Tom T. »

Giorgio Maone wrote:The site appears to work as soon as I allow kawasaki.com, but I couldn't find neither "parts" nor "diagrams" in any page using the Find tool.
Could you tell me where I need to click to check the parts diagram?
It's a long process, and the pages take a loooong time to load.
During the process, at one point, page source warned of an upcoming iFrame:

Code: Select all

//Should script hide iframe from browsers that don't support this script (non IE5+/NS6+ browsers. Recommended):
var iframehide="yes";
var getFFVersion=navigator.userAgent.substring(navigator.userAgent.indexOf("Firefox")).split("/")[1]
var FFextraHeight=parseFloat(getFFVersion)>=0.1? 16 : 0 //extra height in px to add to iframe in FireFox 1.0+ browsers
So be prepared to see the NS blocklogo and an iFrame warning, or else uncheck "forbid iFrame" in Options > Plugins.

Also, along the way, a new script is introduced from kawasakispec.com. It must be allowed.

I did in fact reproduce the OP's error, and also worked around it to success.
This page is *seriously* messy!

To reproduce, from the OP's link:

Where "Search by model information", leave the default, Motorcycle. > Continue.
Choose (for example) Model Year = 2008, CC = 2000, Product Types = ALL, Marketing Names = All > Continue.
From box #3) "Click here to choose" > Model Year 2008, Product Vulcan
Under "Vehicle Information", click "Parts Diagrams".
Click, for example, VN2000G8F

A page of errors appears, as per the OP:

Code: Select all

The web site you are accessing has experienced an unexpected error.
Please contact the website administrator.

The following information is meant for the website developer for debugging purposes.
Error Occurred While Processing Request
Element LANGSELECT is undefined in FORM.
 
The error occurred in E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm: line 25
Called from E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm: line 1
Called from E:\Inetpub\wwwroot\working\KawasakiMC32\KawasakiLauncher.cfm: line 6

23 : 
24 : <!--- make sure the selected LangID is licensed --->
25 : <cfif Not ListFind(Application.LangList, Form.LangSelect)>
26 : 	<cfset Form.LangSelect = Application.INISettings[952]>
27 : </cfif>

Resources:

    * Check the ColdFusion documentation to verify that you are using the correct syntax.
    * Search the Knowledge Base to find a solution to your problem.

Browser   	Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US at an expert level; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 diehard
Remote Address   	24.170.184.140
Referrer   	
Date/Time   	29-Jun-09 01:42 AM
Stack Trace
at cfValidateLogin2ecfm1480342642._factor20(E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm:25) at cfValidateLogin2ecfm1480342642.runPage(E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm:1) at cfKawasakiLauncher2ecfm1532698325.runPage(E:\Inetpub\wwwroot\working\KawasakiMC32\KawasakiLauncher.cfm:6)

coldfusion.runtime.UndefinedElementException: Element LANGSELECT is undefined in FORM.
	at coldfusion.runtime.CfJspPage.resolveCanonicalName(CfJspPage.java:1061)
	at coldfusion.runtime.CfJspPage._resolve(CfJspPage.java:1038)
	at coldfusion.runtime.CfJspPage._resolveAndAutoscalarize(CfJspPage.java:1137)
	at cfValidateLogin2ecfm1480342642._factor20(E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm:25)
	at cfValidateLogin2ecfm1480342642.runPage(E:\Inetpub\wwwroot\working\KawasakiMC32\ValidateLogin.cfm:1)
	at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:152)
	at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:349)
	at coldfusion.runtime.CfJspPage._emptyTag(CfJspPage.java:1915)
	at cfKawasakiLauncher2ecfm1532698325.runPage(E:\Inetpub\wwwroot\working\KawasakiMC32\KawasakiLauncher.cfm:6)
	at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:152)
	at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:349)
	at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)
	at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:225)
	at coldfusion.filter.PathFilter.invoke(PathFilter.java:86)
	at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:69)
	at coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:52)
	at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
	at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
	at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
	at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
	at coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:115)
	at coldfusion.CfmServlet.service(CfmServlet.java:107)
	at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:78)
	at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:91)
	at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
	at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:257)
	at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:541)
	at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:204)
	at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:318)
	at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:426)
	at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:264)
	at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
Also, when attempting to copy this error page, a UI Redressing warning (clickjacking) appeared. Uncheck "Leave it blocked".

Error console:

Code: Select all

Error: cmCreatePageElementTag is not defined
Source File: http://www.kawasaki.com/DefaultFrame.aspx?strContentURL=/Site/VIVehicleInformation/VIepc.asp?intCatalogID%3d2%26CatalogTypeID%3d4%26ProductTypeID%3d63%26ModelMarketingID%3d567%26ModelCode%3dVN2000G9F%26ModelYear%3d2009%26SHOWVEHTABS%3d1
Line: 160

Error: JS_Progress_Block_Root_Obj has no properties
Source File: https://www.kawasakiepc.com/script/JSLibrary.js
Line: 790
The page is attempting to redirect to a secure, https site, https://kawasakispec.com.

XSS warning shows:

Code: Select all

POST [https://www.kawasakispec.com/KawasakiLauncher.cfm

FROM [http://www.kawasaki.com/SITE/VIVEHICLEINFORMATION/VIepc=launch.asp?KMCSession= (20+alphanumeric session ID number)%%2F%2A%2A&searchModel=VN2008G8F]
After allowing the "Unsafe Reload":
The Parts Diagram is launching into a new window. Click Here if it does not launch.
If the Parts Diagram window has not opened, adjust your internet browser popup settings to allow popups from this site.
(allowed popups from Kawasaki.com)
Cllicked on "click here"

Popup opens (no toolbar at top, can't copy)
URL = https://www.kawasakispec.com

Success! List of 69 links appears, from "Air cleaner" to "Water pump".
Clicking on, say, "Water pump" produces the desired diagram and parts list for the water pump.

Conclusion: IMHO, site is way over-complicated, but Workaround:

1) Either uncheck "Forbid iFrame" in NoScript/Options/Plugins, or be ready to click the NoScript block logo and OK the iFrame when you click the red logo and the confirmation appears.
2) When you see the NS icon turn from all blue to partly red, that is when kawasakispec.com is trying to load its script. Allow it.
3) When you see the red "XSS" logo in the lower right of the browser (status bar), click it, click "Unsafely reload", confirm "OK". (Or in NS Options > Advanced > XSS, add an exception for kawasaki.com)
4) Allow popups for http://www.kawasaki.com in Firefox Tools > Options > Content > Block Popup Windows > Exceptions, and/or in any other popup-blocking software that you have.

This seems to work. I'll leave it to Giorgio to tell Kawasaki why their site is triggering clickjacking and cross-site scripting warnings, and what they need to do to make this blob work properly without all the errors and workarounds.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US at an expert level; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 diehard
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: Problem with site...

Post by GµårÐïåñ »

None of all that, I went to the link you provided, temp allowed kawazaki and everything worked, nothing more was needed. Check to see if you have something else blocking it (I have both ABP and RP and they played no roles) so it might be another extension. Try exporting your NS whitelist and then reset it and try again, it might be something got stuck or corrupted.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Problem with site...

Post by therube »

I get basically the same as Tom.

URL: Parts Diagram Selector: ZX1000 Series

Select one of the models

Gibberish (website) error message

Unsafe Reload may appear, or you may need to refresh or reopen the (existing) URL in another window

(In the end, you'll end up at a URL like, https://www.kawasakiepc.com/SystemSearc ... N=55445723 - though looks like it will not work for you because of built-in timeout ...)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1pre) Gecko/20090617 SeaMonkey/2.0b1pre
Post Reply