Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permission denied to access property eventPhase #31

Merged
merged 1 commit into from
Apr 3, 2020
Merged

Conversation

dgraham
Copy link
Owner

@dgraham dgraham commented Apr 2, 2020

There was an attempt to access an object for which you have no permission.
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Errors/Property_access_denied

This is a frequent exception from Firefox browsers with extensions that inject third-party scripts. The script dispatches an event that bubbles up to the document listener which tries to access its eventPhase property. This is not allowed because the event was generated from a third-party origin.

So attempt to read the property from the event, while catching errors, to determine if we're allowed to use it. This seems like something the browser should shield from the first-party site but here we are.

> There was an attempt to access an object for which you have no permission.
—https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Errors/Property_access_denied

This is a frequent exception from Firefox browsers with extensions that
inject third-party scripts. The script dispatches an event that bubbles
up to the document listener which tries to access its eventPhase property.
This is not allowed because the event was generated from a third-party origin.

So attempt to read the property from the event, while catching errors,
to determine if we're allowed to use it. This seems like something the
browser should shield from the first-party site but here we are.
@dgraham dgraham requested review from koddsson and muan April 2, 2020 18:33
@koddsson
Copy link
Collaborator

koddsson commented Apr 2, 2020

This seems like something the browser should shield from the first-party site but here we are.

You should send Firefox a patch :trollface:

@dgraham dgraham merged commit ca7cdd8 into master Apr 3, 2020
@dgraham dgraham deleted the event-permission branch April 3, 2020 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants