#689985 iceweasel: jquery ajax load loops when accessing Access-Control-Allow-Origin enabled site (CORS)

Package:
iceweasel
Source:
firefox-esr
Submitter:
Dick Middleton
Date:
2025-09-18 07:31:36 UTC
Severity:
normal
Tags:
#689985#5
Date:
2012-10-08 18:49:45 UTC
From:
To:
Dear Maintainer,

There is a problem with Iceweasel when using jquery ajax load requests
and the access is cross-origin.

This problem occurs at least with iceweasel 10.0.7, 16.* on Debian and Firefox
15.* on Windows.  It's almost certainly an upstream problem.

With a standard bit of jquery javascript like:

$.ajax({
	url: http://example.site/

it works fine with local origin but fails when the url is on a different
server from original request.

If the CORS server allows cross-origin requests by sending the header:

  "Access-Control-Allow-Origin: *"    or
  "Access-Control-Allow-Origin: http://example.site"

then the ajax load access repeates indefinately (i.e. infinite loop) -
until the browser page is closed. The server responds with http return
code 200 for each access.

( FYI No such problem occurs when using Chrome with same script. Opera
doesn't seem to support CORS at all :-) . )

Also when Access-Control-Allow-Origin is not enabled iceweasel/firefox
fails properly with an error but the error reported is undefined
(i.e. no information, error type etc.).

Thanks

Dick

#689985#10
Date:
2025-09-18 07:29:21 UTC
From:
To:
src:iceweasel has been superseded by src:firefox-esr in version
45.0esr-1 in March 2016. Transitional packages to ease upgrades were
provided in the wheezy, jessie, stretch and buster releases. The
transitional packages have been removed finally before the bullseye
release in August 2021.
After regular security support for buster ended in August 2022 and LTS
support ended in June 2024, I'm closing the remaining bug reports now.

Andreas