none
Permission Denied in accessing and changing frame's location.href due to security patch RRS feed

  • Question

  • Hi,

    Our web application encountered a problem.

    After installation of a security update for Internet Explorer 8 (KB3038314), the system displays ‘Navigation to webpage was cancelled’ on a separate pop-up dialog window after clicking several menu items in its main menu. The expected behaviour is that the content or screen represented by the menu item will be displayed in the designated frame.

    Upon clicking a new menu item which will trigger replacing the frame's content URL, the expectation is for the system to be able to replace the value of the frame's location.href property. Upon debug inspection, this is "Permission Denied".

    The following vulnerabilities are addressed by the patch and have direct implications on IE8:

     Multiple Memory Corruption

     Address Space Layout Randomization (ALSR) Bypass , Remote Code Execution

    *Is it possible that the patch may have affected accessing the URL property of the frame??

    Any ideas would help. Thanks.

    Friday, March 11, 2016 9:32 AM

Answers

  • Hi,

    IE8 is no longer supported. You should upgrade to Windows7 and IE11.

    You could use the iframes src attribute instead of the location.href property to change the content location. eg.

    menu item

    <a href="\accounting\creative.asxp" target="thecontentframe">Creative accounting</a>

    Post questions about html, css and scripting to http://stackoverflow.com (the sections covering your version of IE)... If possible include with your questions a link to your website or a mashup on http://jsfiddle.com or a mashup in the inline code editors that are available on their forums.

    Regards.

    Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions. If you are a consumer looking for answers or to raise a question, it's highly recommended you head on over to http://answers.microsoft.com/en-us


    Rob^_^

    Sunday, March 13, 2016 5:27 AM

All replies

  • Hi,

    IE8 is no longer supported. You should upgrade to Windows7 and IE11.

    You could use the iframes src attribute instead of the location.href property to change the content location. eg.

    menu item

    <a href="\accounting\creative.asxp" target="thecontentframe">Creative accounting</a>

    Post questions about html, css and scripting to http://stackoverflow.com (the sections covering your version of IE)... If possible include with your questions a link to your website or a mashup on http://jsfiddle.com or a mashup in the inline code editors that are available on their forums.

    Regards.

    Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions. If you are a consumer looking for answers or to raise a question, it's highly recommended you head on over to http://answers.microsoft.com/en-us


    Rob^_^

    Sunday, March 13, 2016 5:27 AM
  • Hi,
    Would you mind letting me know the result of the suggestions? If you need further assistance, feel free to let me know. I will be more than happy to be of assistance.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, March 17, 2016 9:03 AM
    Moderator