IE error in Oxfam image drawer when previewing newly-uploaded image

Bug #1247086 reported by Stefan Walluhn
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
KARL3
Won't Fix
Low
yp

Bug Description

When adding a new image to a page with the help of the mceEditor (insert/edit Image -> Upload New), it fails with several error messages like:
* j is undefined
* Cannot read property 'upload_image_info' of undefined

Nevertheless the image is uploaded and available under "My Recent"

Changed in karl3:
importance: Undecided → Low
milestone: none → m130
Changed in karl3:
milestone: m130 → m131
Changed in karl3:
milestone: m131 → m132
summary: - image upload error in mceEditor
+ IE error in Oxfam image drawer when previewing newly-uploaded image
Revision history for this message
Paul Everitt (paul-agendaless) wrote :

Did some investigation on this. I can recreate this on oxfamstaging under IE10. However, I can't recreate it on OSF production or staging, nor on a local sandbox.

I looked at the IE10 console and the network traffic. The image is indeed uploaded fine. It appears to be an error caused when we show a local preview of the image. The IE10 console has a number of errors such as:

SEC7111: HTTPS security is compromised by res://ieframe.dll/bullet.png

After doing some research, I believe this is related to the custom security used for Oxfam's SSO implementation triggering the warning. Back to gocept to decide on the next steps.

Changed in karl3:
assignee: nobody → yp (yp)
milestone: m132 → m133
Revision history for this message
Paul Everitt (paul-agendaless) wrote :

Closing due to lack of interest.

Changed in karl3:
status: New → Won't Fix
Revision history for this message
Stefan Walluhn (stw-c) wrote :

We were able to identify the issue: It is caused by a framing prevention header we added in the frontend nginx config for security reasons. After disabling the header image upload works as expected.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.