Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SecurityError: The operation is insecure #11

Closed
ghost opened this issue Sep 19, 2017 · 4 comments
Closed

SecurityError: The operation is insecure #11

ghost opened this issue Sep 19, 2017 · 4 comments
Labels

Comments

@ghost
Copy link

ghost commented Sep 19, 2017

Firefox is complaining about an operation being insecure, but I'm not sure what. Haven't had time to debug yet, but I'm using FF 55.0.2 (64-bit). I've attached a screenshot of the error output as well.

Happy to share the blog URL if that's helpful at all - it's entirely possible (read: likely) that I'm being a doofus. Really nice idea though, and nice execution - love the idea of GH issues as comments.

screenshot from 2017-09-19 16-26-52

@ghost
Copy link
Author

ghost commented Sep 20, 2017

OK so after a little further hunting, it appears that the error is on L94 of client.js, which corresponds to the LocalStorage operations in the Token class in oauth.ts. I think Firefox is blocking LocalStorage requests from iFrames/included HTML.

@jdanyow
Copy link
Member

jdanyow commented Nov 5, 2017

I'm not able to repro this in firefox standard or developer edition

@ghost
Copy link
Author

ghost commented Nov 6, 2017

Minimal working example:

Using Firefox 56.0, Ubuntu 16.04.

@jdanyow jdanyow added the bug label Dec 10, 2017
@jdanyow
Copy link
Member

jdanyow commented Dec 10, 2017

@newey01c thanks for reporting this, I was able to reproduce by opening about:config in firefox and setting the dom.storage.enabled property to false.

This is now fixed, apologies for the delay.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant