Iframe manipulation opens frame source in new tab
Posted: Mon Aug 03, 2009 9:21 pm
Hi there,
I'm a software developer at a site called Lijit (http://www.lijit.com/). Our product is essentially a search box that users install on their respective sites. We currently power the search behind some popular blogs like http://icanhascheezeburger.com/ and http://failblog.org/. Recently some users have reported an issue to us when viewing these sites with Firefox 3.0+ (including 3.5+) and NoScript installed.
Our Javascript attempts, when these sites are loaded, to attach an iframe to the DOM's <body> element. This iframe's src is http://www.lijit.com/loading.html and is initially set to display:none. When someone initiates a search, we show the iframe and some surrounding HTML, which initially shows a spinning progress indicator (which is what the loading.html page is). However, when some users access the site with noscript this iframe source (loading.html) opens in a new tab. We have determined that disabling NoScript removes this undesired behavior and we are hoping you guys can help.
Steps to reproduce:
Install NoScript in FF 3 +
Set your firefox homepage to http://www.icanhascheezburger.com/. Close and re-open your browser.
Choose “trust icanhascheezburger.com” from the NoScript menu.
Close, and reopen your browser.
Once the page loads, you should see a new tab created with a URL of http://www.lijit.com/loading.html.
It happens if one of these domains is set to your homepage, or if Firefox is configured to restore your tabs from your last session, and one of the sites was part of that list. In other words, if the page opens at browser load, the error occurs, but subsequent clicks and page loads don't produce the behavior.
We are hoping you guys might have some insight into this issue as we've had a few people complain about it now. We appreciate any help you can offer.
Thanks,
Derek Greentree
I'm a software developer at a site called Lijit (http://www.lijit.com/). Our product is essentially a search box that users install on their respective sites. We currently power the search behind some popular blogs like http://icanhascheezeburger.com/ and http://failblog.org/. Recently some users have reported an issue to us when viewing these sites with Firefox 3.0+ (including 3.5+) and NoScript installed.
Our Javascript attempts, when these sites are loaded, to attach an iframe to the DOM's <body> element. This iframe's src is http://www.lijit.com/loading.html and is initially set to display:none. When someone initiates a search, we show the iframe and some surrounding HTML, which initially shows a spinning progress indicator (which is what the loading.html page is). However, when some users access the site with noscript this iframe source (loading.html) opens in a new tab. We have determined that disabling NoScript removes this undesired behavior and we are hoping you guys can help.
Steps to reproduce:
Install NoScript in FF 3 +
Set your firefox homepage to http://www.icanhascheezburger.com/. Close and re-open your browser.
Choose “trust icanhascheezburger.com” from the NoScript menu.
Close, and reopen your browser.
Once the page loads, you should see a new tab created with a URL of http://www.lijit.com/loading.html.
It happens if one of these domains is set to your homepage, or if Firefox is configured to restore your tabs from your last session, and one of the sites was part of that list. In other words, if the page opens at browser load, the error occurs, but subsequent clicks and page loads don't produce the behavior.
We are hoping you guys might have some insight into this issue as we've had a few people complain about it now. We appreciate any help you can offer.
Thanks,
Derek Greentree