Edge can not access/change content of child 'about:blank' window (Permission denied)

Fixed Issue #15755797

Details

Author
Dmytro O.
Created
Feb 2, 2018
Privacy
This issue is public.
Found in
  • Microsoft Edge
Found in build #
14.14393
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

when creating new window like
var testWindow = window.open('about:blank', 'TEST', features);
I’m not able to change it’s content via
testWindow.document.body.innerHTML = ...
due to Permission denied error

code sample:

(function() {
var form = document.createElement('form');
form.setAttribute('method', 'GET');
form.setAttribute('action', 'https://google.com');
form.setAttribute('style', 'display: none');

var input = document.createElement('input');
input.setAttribute('type', 'hidden');
input.setAttribute('name', 'q');
input.setAttribute('value', 'Edge');

form.appendChild(input);

 var features = 'resizable=yes,width=1024,height=773' +
     ',innerWidth=1024,innerHeight=773,' + 
     'left=256,top=16,scrollbars=no,' + 
     'status=x,toolbar=no,menubar=no';

var testWindow = window.open('about:blank', 'TEST', features);

if(!testWindow) {
    alert('Disable popup blocker, plz');
}

testWindow.document.body.innerHTML = form.outerHTML;
testWindow.document.forms[0].submit();
})();

Expected result: form is inserted in body of child window and then successfully submitted.
Actual result: script crashes with exception ‘Permission denied’ at testWindow.document.body.innerHTML = form.outerHTML;

It’s working in IE11

Also, PLEASE NOTE, if you’ll try to run this code in iFrame (for example on http://jsbin.com/) it will execute as expected.

easiest way to reproduce is to execute it in console.

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “James M.”

    • Hello,

      Thank you for providing this information about the issue. We are pleased to report this feature is fixed and available in our current public build Edge 16299
      .

      Best Wishes,
      The MS Edge Team

    • Microsoft Edge Team

      Changed Status to “Fixed”

    You need to sign in to your Microsoft account to add a comment.

    Sign in