document.domain gives Access denied

[vrushali.v.patil]

Hi,

I am using an iframe, the contents of the iframe run on the same domain
but on a different port number. I need to use cross-frame scripting
because the iframe resizes itself at the time of onload based on the
contents in the document.

Until a few days ago I was using the document.domain solution to take
care of the permissions denied
problems(http://www.mozilla.org/projects/security/components/same-origin.html).
Now suddenly the code has stopped working. When I use document.domain,
I get Access denied.

I found http://support.microsoft.com/default.aspx?scid=kb;en-us;889407
on the microsoft website. But their workaround is only going to fix my
machine not the customers who access our site.

Does anyone have any other workarounds?

Thanks

Vrushali

 

[Robert Aldwinckle]

Hi,

I am using an iframe, the contents of the iframe run on the same domain
but on a different port number. I need to use cross-frame scripting
because the iframe resizes itself at the time of onload based on the
contents in the document.

Until a few days ago I was using the document.domain solution to take
care of the permissions denied
problems(http://www.mozilla.org/projects/security/components/same-origin.html).
Now suddenly the code has stopped working. When I use document.domain,
I get Access denied.

I found http://support.microsoft.com/default.aspx?scid=kb;en-us;889407
on the microsoft website.

Note: that hotfix specifies version

10-Feb-2005 17:19 6.00.2900.2608 3,008,000 Mshtml.dll

But their workaround is only going to fix my
machine not the customers who access our site.

Does anyone have any other workarounds?

Have you tried checking if the latest cumulative security update
contains that hotfix?

http://www.microsoft.com/technet/security/Bulletin/MS05-052.mspx
(Expand:
[-] Security Update Information
[-] Windows XP Service Pack 2 (all versions) and Windows XP Professional x64
)
<extract>
Mshtml.dll
6.0.2900.2769
05-Oct-2005
00:51
3,017,728
x86
SP2QFE

Thanks

Vrushali

Good luck

Robert Aldwinckle
---