Bugzilla – Full Text Bug Listing
| Summary: | Empty Page / This content cannot be displayed in a frame | ||
|---|---|---|---|
| Product: | Community | Reporter: | Dani Megert <daniel_megert> |
| Component: | Bugzilla | Assignee: | Eclipse Webmaster <webmaster> |
| Status: | RESOLVED WONTFIX | QA Contact: | |
| Severity: | normal | ||
| Priority: | P3 | CC: | denis.roy, kitlo |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | PC | ||
| OS: | Windows 7 | ||
| Whiteboard: | |||
| Bug Depends on: | |||
| Bug Blocks: | 442547 | ||
The latest Bugzilla upgrade is responsible for this. It is to prevent inlining content into a foreign frame to prevent Cross-site request forgery attacks. Links to external sites inside a frame should open in a new window/tab. I think we should move this to UA. (In reply to Denis Roy from comment #1) > The latest Bugzilla upgrade is responsible for this. It is to prevent > inlining content into a foreign frame to prevent Cross-site request forgery > attacks. OK. > Links to external sites inside a frame should open in a new window/tab. I > think we should move this to UA. I disagree. For a user this is a bad experience. > I disagree. For a user this is a bad experience.
So are frames :)
At any rate, I'm not sure what you'd want us to do. We're not going to remove the CSRF protection on Bugzilla.
(In reply to Denis Roy from comment #3) > We're not going to > remove the CSRF protection on Bugzilla. OK. (In reply to Dani Megert from comment #0) > When clicking on bugzilla links in the help center one gets an empty page > and when I do this inside my Eclipse IDE I get this: > "This content cannot be displayed in a frame" or an empty page. To close on this: the difference, empty page (Firefox) vs. error page (IE), comes from the browser. Chrome doesn't even switch the page and just ignores the click. We'll go and fix this with bug 442547. |
When clicking on bugzilla links in the help center one gets an empty page and when I do this inside my Eclipse IDE I get this: "This content cannot be displayed in a frame" or an empty page. Is there a reason to prevent showing the bug report in a frame? Test Case: 1. open http://help.eclipse.org/luna/topic/org.eclipse.platform.doc.user/tasks/running_eclipse.htm?cp=0_3_0 2. scroll down and click on the '139319' link ==> empty page