InformAction Forums

NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/

@ surrogate for the hotmail compose iframe is invoked twice

https://forums.informaction.com/viewtopic.php?t=4733

Page 1 of 1

@ surrogate for the hotmail compose iframe is invoked twice

Posted: Tue Jul 27, 2010 11:03 am
by al_9x

Code: Select all

sources=@.mail.live.com/mail/EditMessageLight.aspx
replacement=dump('test surrogate - '+document.URL+'\n');
When you click "New," the iframe on "/default.aspx" containing "/mail/InboxLight.aspx" is replaced with "/mail/EditMessageLight.aspx"

The surrogate runs twice, dumping "/mail/InboxLight.aspx" the first time, then "/mail/EditMessageLight.aspx"

Refreshing the page (which loads "/mail/EditMessageLight.aspx" in the iframe) causes the surrogate to run once, dumping "about:blank"

Incidentally, what is the expected value of location when the @ surrogate runs?

There seems to be a lot of repetition in the log related to the loading of "EditMessageLight.aspx"

Code: Select all

[NoScript] ClearClick skipping, same site parents for http://.mail.live.com
 ----------
[NoScript] Guessed MIME '' for location javascript:;
 ----------
[NoScript] Document OK: @javascript:; --- PGFM: null
 ----------
[NoScript] Content processing -- type: 7, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, origin: http://.mail.live.com/mail/InboxLight.aspx?FolderID=00000000-0000-0000-0000-000000000001&n=, ctx: <HTML Element>, mime: , null
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"",null)@chrome://noscript/content/Policy.js:160
(-10)@http://gfx3.hotmail.com/mail/15.3.2518.0725/l0a.mozilla.js:1

 ----------
[NoScript] Guessed MIME '' for location http://.mail.live.com/mail/EditMessageLight.aspx?n=
 ----------
[NoScript] Document OK: @http://.mail.live.com/mail/EditMessageLight.aspx?n= --- PGFM: null
 ----------
[NoScript] Content processing -- type: 7, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, origin: http://.mail.live.com/mail/InboxLight.aspx?FolderID=00000000-0000-0000-0000-000000000001&n=, ctx: <HTML Element>, mime: , null
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"",null)@chrome://noscript/content/Policy.js:160
(-10)@http://gfx3.hotmail.com/mail/15.3.2518.0725/l0a.mozilla.js:1

 ----------
[NoScript] Guessed MIME '' for location http://.mail.live.com/mail/EditMessageLight.aspx?n=
 ----------
[NoScript] Document OK: @http://.mail.live.com/mail/EditMessageLight.aspx?n= --- PGFM: null
 ----------
[NoScript] http-on-modify-request: http://.mail.live.com/mail/EditMessageLight.aspx?n=, 2686976
 ----------
[NoScript] Content processing -- type: 7, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, origin: http://.mail.live.com/mail/InboxLight.aspx?FolderID=00000000-0000-0000-0000-000000000001&n=, ctx: <HTML Element>, mime: , 2
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"",2)@chrome://noscript/content/Policy.js:160
([object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],983041,0)@chrome://noscript/content/Main.js:3992
(-10)@http://gfx3.hotmail.com/mail/15.3.2518.0725/l0a.mozilla.js:1

 ----------
[NoScript] Guessed MIME '' for location http://.mail.live.com/mail/EditMessageLight.aspx?n=
 ----------
[NoScript] Document OK: @http://.mail.live.com/mail/EditMessageLight.aspx?n= --- PGFM: null
 ----------
[NoScript] DocShell JS Switch: http://.mail.live.com/mail/EditMessageLight.aspx?n= - true/true/false
 ----------
[NoScript] http-on-examine-response: http://.mail.live.com/mail/EditMessageLight.aspx?n=, 2686976
 ----------
[NoScript] OCS: http://.mail.live.com/mail/EditMessageLight.aspx?n=, text/html
 ----------
[NoScript] Content processing -- type: 7, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, origin: http://.mail.live.com/mail/EditMessageLight.aspx?n=, ctx: <HTML Element>, mime: text/html, 2
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"text/html",2)@chrome://noscript/content/Policy.js:160
([object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:4365
([object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:4264
([object XPCWrappedNative_NoHelper],"http-on-examine-response",null)@chrome://noscript/content/RequestWatchdog.js:99

 ----------
[NoScript] Document OK: text/html@http://.mail.live.com/mail/EditMessageLight.aspx?n= --- PGFM: null
 ----------
[NoScript] Location Change - req.URI: http://.mail.live.com/mail/EditMessageLight.aspx?n=, window.location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=
 ----------
[NoScript] Content processing -- type: 7, location: http://.mail.live.com/mail/EditMessageLight.aspx?n=, origin: http://.mail.live.com/mail/EditMessageLight.aspx?n=, ctx: <HTML Element>, mime: text/html, 2
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"text/html",2)@chrome://noscript/content/Policy.js:160
([object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:4365
([object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:4045

 ----------
[NoScript] Document OK: text/html@http://.mail.live.com/mail/EditMessageLight.aspx?n= --- PGFM: null

Re: @ surrogate for hotmail wave4 compose iframe invoked twi

Posted: Tue Jul 27, 2010 2:52 pm
by Giorgio Maone
al_9x wrote: Incidentally, what is the expected value of location when the @ surrogate runs?
There's no "expected" location value. In new frames it's usually about:blank.
document.URL should be more reliable.

Re: @ surrogate for hotmail wave4 compose iframe invoked twi

Posted: Tue Jul 27, 2010 3:19 pm
by al_9x
Do you have wave4 hotmail? Can you repro?

Re: @ surrogate for hotmail wave4 compose iframe invoked twi

Posted: Tue Jul 27, 2010 3:36 pm
by Giorgio Maone
al_9x wrote:Do you have wave4 hotmail? Can you repro?
No, I've got a regular Hotmail test account.

Re: @ surrogate for hotmail wave4 compose iframe invoked twi

Posted: Tue Jul 27, 2010 7:55 pm
by al_9x
Giorgio Maone wrote:
al_9x wrote:Do you have wave4 hotmail? Can you repro?
No, I've got a regular Hotmail test account.
And you don't see the double invocation? I've been able to repro on old hotmail as well. Dumping document.URL gives the same urls (InboxLight.aspx, EditMessageLight.aspx) What do you see?

Re: @ surrogate for the hotmail compose iframe is invoked tw

Posted: Thu Aug 12, 2010 2:24 pm
by Giorgio Maone
It should be fixed in latest development build. If it's not, please file a bug on the Mozilla tracker blocking https://bugzilla.mozilla.org/show_bug.cgi?id=549539

Re: @ surrogate for the hotmail compose iframe is invoked tw

Posted: Thu Aug 12, 2010 3:05 pm
by al_9x
Giorgio Maone wrote:It should be fixed in latest development build. If it's not, please file a bug on the Mozilla tracker blocking https://bugzilla.mozilla.org/show_bug.cgi?id=549539
This issue was fixed in 2.0.1rc5
All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited