Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <dev@tomcat.apache.org>
From: bugzilla@apache.org
To: tomcat-dev@jakarta.apache.org
Subject: DO NOT REPLY [Bug 44527] New: window.open() for mime extensions does
 not work with security constraints.
Message-ID: <bug-44527-78@https.issues.apache.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Date: Tue,  4 Mar 2008 06:18:47 -0800 (PST)

https://issues.apache.org/bugzilla/show_bug.cgi?id=3D44527

           Summary: window.open() for mime extensions does not work with
                    security constraints.
           Product: Tomcat 5
           Version: 5.5.9
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: andre.laurent@vivium.lu


With security constraints set up, I have noticed that the javascript
window.open () does not work properly when calling a local program (such as
Acrobat Reader, MS-Word, notepad =E2=80=A6) through Mime extensions.  With =
PDF files,
the new window opens and displays a blank page.  With MS-Word, notepad =E2=
=80=A6, an
error occurs saying (translated in English) : Internet Explorer cannot down=
load
the file xxxxx from xxxxx.  The page requested is unavailable or cannot be
found.

Code example :

function ouvrir (pdf) {
        window.open (pdf, 'fenetre', 'location=3Dno,menubar=3Dyes,resizable=
=3Dyes') ;
}

<a href=3D"javascript:ouvrir('prt/<%=3D pdfName %>')<%=3D pdfName %></a>


Some tests show the following :

-       The problem occurs equally with IE7 and IE6.
-       showModalDialog does not work neither.

The problem does not occur :=20

-       if window.open () is used to open a simple HTML (or a JSP) page.
-       If the document opens in the current page <a href=3D=E2=80=9Dxxx=E2=
=80=9D>
-       If window.open () is replaced by <a href=3D=E2=80=9Dxxx=E2=80=9D
target=3D=E2=80=9D_blank=E2=80=9D>.

One thing is sure : if the security constraints are removed (I am using
JDNDIRealm ldap for authentication), window.open() works well in all the ca=
ses.

Many thanks for your feedback !


--=20
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=3De=
mail
------- You are receiving this mail because: -------
You are the assignee for the bug.=

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org