Announcement

Do not use the forums to submit bug reports, feature requests or patches, submit a New Ticket instead.

#1 2009-02-13 22:48:15

kcsunshine
New member
Registered: 2009-02-13
Posts: 8

Stops working with Firefox 3.0.6 and Safari

Hey all,
I searched around for hours for a solution to this, and finally found one, so I wanted to post it here in case anyone else ran into this problem.

While typing out all of my location url's for css, html, and js, I had inadvertently forgot to put a www in the location of the xinha folder while the locations for the css and html was to a www.mysite.com.  This causes the browser to think it's a cross-site scripting attack and will not allow it.  Specifically, this added security bonus that will not allow HTMLDocument.body or .open permission as seen in the js error console.  I found this in the new update of firefox, and it also happened in safari.  See the link below for more details and a better description of the fix.

http://forums.movabletype.org/2008/06/d … o-bla.html

Offline

#2 2009-02-14 08:36:52

ron
New member
Registered: 2009-02-13
Posts: 3

Re: Stops working with Firefox 3.0.6 and Safari

Can you better describe where the corections must be made.

Thanks

Offline

#3 2009-02-14 12:45:16

kcsunshine
New member
Registered: 2009-02-13
Posts: 8

Re: Stops working with Firefox 3.0.6 and Safari

Sure,
If you use external files for any css or javascript, they must point to the EXACT same location.  For example, if you have a css file point to:
     <link rel="stylesheet" type="text/css" href="http://www.myurl.com/css/stylesheet.css" />
Then you must point xinha to the same place:
     _editor_url  = "http://www.myurl.com/xinha/"
not
     _editor_url  = "http://myrul.com/xinha/"
without the www.  Also, if you have any external js where you use the full url, make sure that is the same also.
  <script type="text/javascript" src="http://www.myurl.com/xinha/XinhaCore.js"></script>
  <script type="text/javascript" src="http://www.myrul.com/xinha/my_Xinha.js"></script>

Changing these to match worked for me.

Offline

Board footer

Powered by FluxBB