Firefox SecurityError: "The operation is insecure."

Question

I am using Backbone.LocalStorage plugin with backbone app. It is working fine in chrome and safari however, it is giving me below error in firefox.

DOMException [SecurityError: "The operation is insecure." code: 18 nsresult: 0x80530012 location: http://localhost:8000/js/libs/backbone.localStorage/backbone.localStorage.js?version=1453910702146:137]

I am using python simpleHttpServer

How can I resolve this error?

UPDATE

Here is my code.

paths: {
    'jquery'        : 'libs/jquery/dist/jquery',
    'underscore'    : 'libs/underscore/underscore',
    'backbone'      : 'libs/backbone/backbone',
    'localStorage'  : 'libs/backbone.localStorage/backbone.localStorage',
    'text'          : 'plugins/text'
}

Here is collection where localStorage is used.

var Items = Backbone.Collection.extend({

    model: SomeModel,

    localStorage: new Backbone.LocalStorage('items'),
});

UPDATE 2

I am using firefox 36.

UPDATE 3

It seems like it is a CORS issue but my firefox version is 36. Which should be fine.

UPDATE 4

I am also getting this error in firefox nightly version 44. I also updated my firefox to version 44. Still same error.

Answer 1

Make sure Firefox has cookies enabled. The setting can be found under Menu/Options/Privacy/History

In the dropdown, select either 'Remember History' or if You prefer use custom settings for history, but select option Accept cookies from sites

Hope it helps.

Answer 2

This happens when we try to access a resource (CSS...) that is located on a different domain. To deal with this error we can use this:

                   try {
                     //your critical access to ressources !
                     //rules = document.styleSheets[i].cssRules;
                        } catch(e) {
                   if(e.name !== "SecurityError") {
                       throw e;
                       }

Answer 3

Make sure your domains are same. verify Same Origin Policy which means same domain, subdomain, protocol (http vs https) and same port.

What is Same Origin Policy?
How does pushState protect against potential content forgeries?