type command fails with security error in Firefox 8 for file inputs #2826

lukeis · 2016-03-03T21:11:52Z

Originally reported on Google Code with ID 2826


What steps will reproduce the problem?
Running this test in windows Vista with Firefox 8.0
It uses a publicly available page to make it easy to replicate the issue
<tr>
    <td>open</td>
    <td>http://www.htmlcodetutorial.com/forms/_INPUT_TYPE_FILE.html</td>
    <td></td>
</tr>
<tr>
    <td>type</td>
    <td>name=upfile</td>
    <td>C:\Users\n.delargy\Desktop\M86_1_SV12.jpg</td>
</tr>

What is the expected output? What do you see instead?
I'd expect this to fill the file input
instead if produces the following exception

[error] Unexpected Exception: code -> 1000, INDEX_SIZE_ERR -> 1, DOMSTRING_SIZE_ERR
-> 2, HIERARCHY_REQUEST_ERR -> 3, WRONG_DOCUMENT_ERR -> 4, INVALID_CHARACTER_ERR ->
5, NO_DATA_ALLOWED_ERR -> 6, NO_MODIFICATION_ALLOWED_ERR -> 7, NOT_FOUND_ERR -> 8,
NOT_SUPPORTED_ERR -> 9, INUSE_ATTRIBUTE_ERR -> 10, INVALID_STATE_ERR -> 11, SYNTAX_ERR
-> 12, INVALID_MODIFICATION_ERR -> 13, NAMESPACE_ERR -> 14, INVALID_ACCESS_ERR -> 15,
VALIDATION_ERR -> 16, TYPE_MISMATCH_ERR -> 17, DATA_CLONE_ERR -> 25, message -> Security
error, result -> 2152924136, name -> NS_ERROR_DOM_SECURITY_ERR, filename -> chrome://selenium-ide/content/selenium-core/scripts/atoms.js,
lineNumber -> 8866, columnNumber -> 0, location -> JS frame :: chrome://selenium-ide/content/selenium-core/scripts/atoms.js
:: <TOP_LEVEL> :: line 8866, inner -> null, data -> null

Selenium version: 1.3.0
OS: Windows
Browser: Firefox
Brower version: 8.0

Reported by n.delargy@ctidigital.com on 2011-11-11 15:27:51

The text was updated successfully, but these errors were encountered:

lukeis · 2016-03-03T21:11:52Z

Affects Selenium IDE

Reported by n.delargy@ctidigital.com on 2011-11-11 15:30:06

lukeis · 2016-03-03T21:11:53Z

Reported by barancev on 2011-11-14 07:26:51

Labels added: Component-Core, Browser-Firefox

lukeis · 2016-03-03T21:11:54Z

I'm seeing the same behavior in Selenium RC when using the *chrome mode for Firefox
8.  I'm getting the following error:

ERROR: Command execution failure. Please search the user group at
https://groups.google.com/forum/#!forum/selenium-users for error
details from the log window. The error message is: Security error

Reported by mike.selenium on 2011-11-14 21:29:34

lukeis · 2016-03-03T21:11:55Z

In atoms.js, changing a.value = d to XPCNativeWrapper(a).value = d under core.events.replaceText
seems to fix this issue for Selenium IDE. Not sure if this is the ideal fix or if it
breaks other stuff.

Reported by youngrobby@live.com on 2011-11-15 14:04:44

lukeis · 2016-03-03T21:11:55Z

This change resolved the issue for me in Selenium RC as well, and my other Type() commands
still worked correctly.

Reported by mike.selenium on 2011-11-15 17:31:06

lukeis · 2016-03-03T21:11:56Z

Issue 2849 has been merged into this issue.

Reported by barancev on 2011-11-16 05:10:15

lukeis · 2016-03-03T21:11:57Z

Have also run into this problem.

How do you edit the atoms.js file if you're running Selenium RC? Can do it with Selenium
IDE, but having troubles finding it with Selenium RC.

Reported by antonios.sarhanis@cxense.com on 2011-11-30 00:31:04

lukeis · 2016-03-03T21:11:58Z

Found the atoms.js file.

More info here:

http://groups.google.com/group/selenium-users/browse_thread/thread/f09fbab515806073

Reported by antonios.sarhanis@cxense.com on 2011-11-30 06:28:26

lukeis · 2016-03-03T21:11:58Z

I've also run into this problem. I'm using Firefox 8 and Selenium IDE 1.4.1. Any idea
if this could be fixed to the next version of Selenium IDE, or do we just need to "hack"
the atoms.js....

Reported by jesse.j.julkunen on 2011-12-01 05:58:44

lukeis · 2016-03-03T21:11:59Z

I've applied the hack and all my tests are still working.  I suppose it'll be fixed
soon, seems to be affecting a lot of people.

Reported by n.delargy@ctidigital.com on 2011-12-01 10:21:46

lukeis · 2016-03-03T21:12:00Z

I have also applied this hack. Hoping for the official fix.

Reported by me@tian.im on 2011-12-01 22:59:27

lukeis · 2016-03-03T21:12:01Z

I am having the same issue; how do i update atoms.js to make my test run?? I am using
selenium-rc

here is the selenium group url where i asked the same question.
http://groups.google.com/group/selenium-users/browse_thread/thread/a25cc0fe1afd00e5/db75c60c10b4d894?hl=en#db75c60c10b4d894

Reported by qatseay on 2011-12-02 18:18:22

lukeis · 2016-03-03T21:12:02Z

I'm tired of seeing this question, so here's my step-by-step guide:

1. Get the latest version of 7-zip on Windows.
2. Open the jar file with 7-zip.
3. Delete the LICENSE file.  I'm sure this isn't exactly kosher, but case-insensitive
Windows confuses the LICENSE file with the license directory.
4. Go to the core\scripts path within the jar file.
5. Edit the atoms.js file.  (Right-click and Edit, or click and F4.)
6. Find the line with "a.value = d" and change it to "XPCNativeWrapper(a).value = d;"
7. Save the changes.  You're done!

* Step 6 is from http://stackoverflow.com/questions/8149403/selenium-ide-1-4-1-throwing-security-error-when-uploading-a-local-file/8248691#8248691

Reported by kbrazier on 2011-12-02 18:38:11

lukeis · 2016-03-03T21:12:02Z

Issue 2994 has been merged into this issue.

Reported by barancev on 2011-12-06 20:39:17

lukeis · 2016-03-03T21:12:03Z

Issue 2906 has been merged into this issue.

Reported by barancev on 2011-12-07 06:20:21

lukeis · 2016-03-03T21:12:04Z

The correct method to use when uploading files is the "attachFile" method, not "type".
We can attempt to make it work in chrome mode for firefox.

Reported by simon.m.stewart on 2011-12-07 12:02:09

Status changed: WontFix

lukeis · 2016-03-03T21:12:05Z

Could the attachFile method also be added to Selenium IDE?

Reported by jesse.j.julkunen on 2011-12-07 12:06:52

lukeis · 2016-03-03T21:12:06Z

Reported by simon.m.stewart on 2011-12-07 12:53:34

Labels added: Component-IDE
Labels removed: Component-Core

lukeis · 2016-03-03T21:12:06Z

Reported by barancev on 2011-12-07 18:59:13

Status changed: New

lukeis · 2016-03-03T21:12:07Z

Re: Comments 18-20, is there another ticket to watch for the RC / core functionality
- comments 3, 14 etc?

Thank you.

Reported by fiztlen on 2011-12-08 17:07:24

lukeis · 2016-03-03T21:12:08Z

It appears that the attachFile command in Selenium RC is also failing with a security
error. On inspection, the attachFile command appears to download a remote file before
calling the type command to place the absolute path to the file into the file input
field. In this case, I don't see an immediate need to add attachFile to Selenium IDE.

I have created a patch that fixes the type security error, and have successfully tested
this with various Firefox versions. Unfortunately I have not been able to run the selenium-atoms
tests in other browsers, so I do not have complete confidence to check this in. If
someone could do this, or assist me it would be much appreciated. I'm keen to get this
fix in time for Selenium IDE 1.5.0.

Reported by dave.hunt on 2011-12-09 00:32:31

Status changed: Started
Labels added: Component-Core, Browser-Atoms

lukeis · 2016-03-03T21:12:09Z

Patch mentioned in previous comment.

Reported by dave.hunt on 2011-12-09 00:33:17

- _Attachment: [2826.patch](https://storage.googleapis.com/google-code-attachments/selenium/issue-2826/comment-23/2826.patch)_

lukeis · 2016-03-03T21:12:09Z

Does this patch also fix it in the non-ide parts? (core and rc)

Reported by lkwg82 on 2011-12-09 10:53:34

lukeis · 2016-03-03T21:12:10Z

@lkwg82 yes, the fix is in the core code.

Reported by dave.hunt on 2011-12-09 11:13:01

lukeis · 2016-03-03T21:12:11Z

Fixed in r15134

Reported by dave.hunt on 2011-12-09 17:50:58

Status changed: Fixed

lukeis · 2016-03-03T21:12:12Z

Hi

I have selenium IDE on my machine plugin installed, I want to update atoms.js file
for 
changing a.value = d to XPCNativeWrapper(a).value = d under core.events.replaceText.
Inorder to do this do i need to install selenium server ?

Please let me know how can i update the atoms.js where can i find that?

Thanks
raj

Reported by Rajsrqa on 2011-12-09 20:19:58

lukeis · 2016-03-03T21:12:12Z

@Rajsrqa this issue has been fixed, and a snapshot build of Selenium IDE is available
here: http://xserve.openqa.org:8085/browse/IDE-EDITOR-210/artifact/MULTI/Selenium-IDE/selenium-ide.xpi

Reported by dave.hunt on 2011-12-09 21:32:44

lukeis · 2016-03-03T21:12:13Z

Hi Dave

Is this fix available in the latest download for selenium IDE 1.0.4 ? If not when can
we see that.

Reported by Rajsrqa on 2011-12-12 15:11:22

lukeis · 2016-03-03T21:12:14Z

@Rajsrqa version 1.0.4 is almost two years old, and I'd be surprised if this even works
with Firefox 8. Please see my last comment with a link to a candidate build for 1.5.0,
which will hopefully be released later this week.

Reported by dave.hunt on 2011-12-12 15:37:10

lukeis · 2016-03-03T21:12:15Z

Issue 3094 has been merged into this issue.

Reported by barancev on 2011-12-26 06:43:11

lukeis · 2016-03-03T21:12:15Z

is this issue ficed in selenium 2.15?

Reported by sanam.chugh@qualitiasoft.com on 2011-12-28 05:02:47

lukeis · 2016-03-03T21:12:16Z

No, 2.15 does not include this fix, it'll go in 2.16

Reported by barancev on 2011-12-28 06:56:35

lukeis · 2016-03-03T21:12:17Z

@Sanam, you should be able to work out how the patch in comment 23 applies to the built
version of the Javascript as with comment 14.

That worked perfectly for me.

Reported by meh@corefiling.co.uk on 2011-12-28 10:22:27

lukeis · 2016-03-03T21:12:18Z

When is the release date of 2.16?

Reported by lazze.ostergaard on 2012-01-03 13:44:26

lukeis · 2016-03-03T21:12:18Z

i have the same Problem using 2.18 and Firefox9 

i tried to change  
goog.userAgent.GECKO && bot.userAgent.isEngineVersion(8) ? XPCNativeWrapper(a).value
= d : a.value = d

into 

goog.userAgent.GECKO && (bot.userAgent.isEngineVersion(8) || bot.userAgent.isEngineVersion(9))
? XPCNativeWrapper(a).value = d : a.value = d

hoping this will fix it for Firefox 9 too but still i get an security error trying
to upload a file.

--> same for type() and attachFile()
--> same with *firefox and *chrome mode

is there any solution for this Problem with Firefox 9??

Reported by matthias.pomm@affinitas.de on 2012-02-01 13:31:37

lukeis · 2016-03-03T21:12:19Z

If this works for you in Firefox 8 then could you raise the failure in Firefox 9 as
a new issue? I suspect if this has regressed then the cause/fix may be different. The
isEngineVersion returns true if the version is at least equal to the argument.

Reported by dave.hunt on 2012-02-01 14:10:15

lukeis · 2016-03-03T21:12:20Z

Hmm, ok it looks like i had a test error yesterday. By retesting it the fileupload is
working in Firefox 8 and 9 with version 2.18 without any errors. 

Dont know why this was not working yesterday.

Sorry for bothering you.

Reported by matthias.pomm@affinitas.de on 2012-02-02 09:54:18

lukeis · 2016-03-03T21:12:21Z

This issue has been reproduced again in 1.7.1 + FF 11, but can be fixed by changing
a.value = d to XPCNativeWrapper(a).value = d.

Reported by yaKuramori on 2012-03-15 17:32:34

lukeis · 2016-03-03T21:12:21Z

I'm aware of this regression will update once I know the reasons for this change. Hopefully
we can get this resolved soon.

Reported by dave.hunt on 2012-03-15 17:35:41

lukeis · 2016-03-03T21:12:22Z

any news? is there a fix for selenium IDE?

Reported by gabriella.loconte@pleiade.it on 2012-03-20 17:14:55

lukeis · 2016-03-03T21:12:23Z

This is being tracked on issue 3549

Reported by dave.hunt on 2012-03-20 20:52:15

lukeis · 2016-03-03T21:12:24Z

Reported by luke.semerau on 2015-09-17 18:14:09

Labels added: Restrict-AddIssueComment-Commit

lukeis self-assigned this Mar 3, 2016

lukeis added Type-Defect Priority-Medium Restrict-AddIssueComment-Commit Status-Fixed Component-IDE Browser-Firefox Component-Core Browser-Atoms labels Mar 3, 2016

lukeis closed this as completed Mar 3, 2016

This was referenced Mar 3, 2016

Problem when entering a filename in a file upload dialog #2849

Closed

i cannot able to upload a xml file using selenium ide #2906

Closed

Unable to upload a document using Selenium IDE #2994

Closed

Cant upload file with type command #3094

Closed

SeleniumHQ locked and limited conversation to collaborators Mar 4, 2016

type command fails with security error in Firefox 8 for file inputs #2826

type command fails with security error in Firefox 8 for file inputs #2826

Comments

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016

lukeis commented Mar 3, 2016