Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Facebook iFrame security error (document.domain) raised by hasPasswordField_

We have a project that use standard Facebook API used mainly for login and registration purpose. Since we use Sentry to receive error notification, the following one (in home page) occurs often:

SecurityError: Blocked a frame with origin "https://www.mywebsite.com" from accessing a 
frame with origin "https://www.facebook.com". The frame being 
accessed set "document.domain" to "facebook.com", but the frame requesting access did not. 
Both must set "document.domain" to the same value to allow access.
at hasPasswordField_ (/en:1:368)
at hasPasswordField_ (/en:1:499)
at findPasswordForms (/en:1:173)
at global code (/en:10:27)

It's strange because the methods

 hasPasswordField_ / findPasswordForms

don't exist on the project code.

Because the error currently occurs only on

iOS Chrome Mobile, version: 59.0.3071 | 60.0.3112

There is a Chrome internal component that is trying to access to the Facebook iFrame or is Facebook searching for some password fields on the webpage?

UPDATE: After a further search, I found this post on Sentry GIT page: https://github.com/getsentry/sentry/issues/5267 they suggest simply to ignore the error.

Any idea how to face it differently? Any help will be appreciated!

like image 339
misterwolf Avatar asked Sep 05 '17 08:09

misterwolf


1 Answers

It says here that the bug has been fixed in version 61. https://crbug.com/709132

like image 79
Josh Lee Avatar answered Nov 06 '22 02:11

Josh Lee