?
Solved

Navigating between frames makes new windows/tabs after installing kb950759

Posted on 2008-06-23
4
Medium Priority
?
248 Views
Last Modified: 2013-12-08
After installation of kb950759 my webbpage (that uses frames) opens my menylinks in new windows/tabs. This occurs in "internet"-mode, and I have noticed that changing the preference "Navigating between domains in frames" (or simular - I use a Swedish version of IE7) under "Security" makes a difference.
For example, changing to "Activate" makes the problem go away.
My problem is that I can not force my visitors to make this change in their browser (of course).

Error should apparently be coused by the fact that page contains code from other domains. Below I´ve posted my code, and as you could see, intellisense from microsoft in the header is the only "external" code.
This problem does not show on pages using only "http://" only on SSL-pages ("https://")

Any advice?
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
	<HEAD>
		<title>xxxxxxxxxx</title>
		<meta content="Microsoft Visual Studio .NET 7.1" name="GENERATOR">
		<meta content="Visual Basic .NET 7.1" name="CODE_LANGUAGE">
		<meta content="JavaScript" name="vs_defaultClientScript">
		<meta content="http://schemas.microsoft.com/intellisense/ie5" name="vs_targetSchema">
		<LINK href="../../site/css/main.css" type="text/css" rel="stylesheet">
		<SCRIPT language="Vbscript">
		sub Markbold(Id)
			Id.style.backgroundColor = "#dcdcdc"
		end sub
		sub UnMarkbold(Id)
			Id.style.backgroundColor = "#ffffff"
		end sub
			
		</SCRIPT>
 
	</HEAD>
	<body MS_POSITIONING="GridLayout">
...... (page output) ............
<iframe src="logon/updateSession.aspx" width="1" height="1" style="DISPLAY:none"></iframe>
	</body>
</HTML>

Open in new window

0
Comment
Question by:mamilldo
  • 2
  • 2
4 Comments
 
LVL 111

Expert Comment

by:Ray Paseur
ID: 21844764
Confusion on the topic of SSL security and frames goes back years...
http://www.velocityreviews.com/forums/t73721-ssl-and-frames.html
http://www.milonic.com/mfa/2005-November/strange-https-problems.html

I don't think the issue arises from cross-domain access; it arises from the mix of secure and non-secure items on the same browser instance.  First, check to be sure your frame names are all correct and your URL paths are explicit.

Next, Try putting all your data behind SSL.  If that doesn't fix it, consider a solution that does not rely on frames.
0
 

Author Comment

by:mamilldo
ID: 21844873
@Ray_Paseur:
My problem is not an old one, and it only occurs on computers that has upgraded windows with kb950759 - and surfs my webpage with Internet Explorer (and also only then they are logged in and in SSL-mode) For example Firefox or Mac's are not affected.

All data are behind SSL then surfing, otherwise you get irritant messages like "do you want to se mixed content" etc.

My problem is only (well it's a big one) that IE opens my links in new window/tab from one frame to another. Navigating in same frame is not a problem.
0
 
LVL 111

Expert Comment

by:Ray Paseur
ID: 21845324
If you're all behind SSL and you're not getting irritant messages, that's good news.

If you can generate a simple test case, you might want to contact MS support. There is a link on this page:
http://support.microsoft.com/kb/950759

Also you might consider posting here (apparently this upgrade has some issues):
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?query=kb950759

If you want to post a link to the site we can look at it more depth.  ~Ray

0
 

Accepted Solution

by:
mamilldo earned 0 total points
ID: 21855101
Hi, thanks for your effort.

We have found out that attached script
in  our default.aspx page (containing our frames) made the error.

We still haven't figured out why this script together with SSL and kb950759 doesn't work, so if anybody has any ideas I'm glad to hear from you.
<script type="text/javascript">
        document.domain = "xxxx.com";
</script>

Open in new window

0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
While opting for any web-to-print solution, you need to discuss with your team and some of your end users and know their opinions about your decisions. In this article we list down some questions you need to ask yourself.
This video teaches users how to migrate an existing Wordpress website to a new domain.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question