Bug#689985: iceweasel: jquery ajax load loops when accessing Access-Control-Allow-Origin enabled site (CORS)

[Dick Middleton]

Package: iceweasel
Version: 16.0~b6-1
Severity: normal
Tags: upstream

Dear Maintainer,

There is a problem with Iceweasel when using jquery ajax load requests
and the access is cross-origin.

This problem occurs at least with iceweasel 10.0.7, 16.* on Debian and Firefox
15.* on Windows.  It's almost certainly an upstream problem.

With a standard bit of jquery javascript like:

$.ajax({
	url: http://example.site/

it works fine with local origin but fails when the url is on a different
server from original request.

If the CORS server allows cross-origin requests by sending the header:

  "Access-Control-Allow-Origin: *"    or
  "Access-Control-Allow-Origin: http://example.site"

then the ajax load access repeates indefinately (i.e. infinite loop) -
until the browser page is closed. The server responds with http return
code 200 for each access.

( FYI No such problem occurs when using Chrome with same script. Opera
doesn't seem to support CORS at all :-) . )

Also when Access-Control-Allow-Origin is not enabled iceweasel/firefox
fails properly with an error but the error reported is undefined
(i.e. no information, error type etc.).

Thanks

Dick

-- Package-specific info:

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages iceweasel depends on:
ii  debianutils         4.3.2
ii  fontconfig          2.9.0-7
ii  libc6               2.13-35
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-0        2.32.3-1
ii  libgtk2.0-0         2.24.10-2
ii  libnspr4            2:4.9.2-1
ii  libnspr4-0d         2:4.9.2-1
ii  libsqlite3-0        3.7.13-1
ii  libstdc++6          4.7.1-7
ii  procps              1:3.3.3-2
ii  xulrunner-16.0      16.0~b6-1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn  fonts-stix | otf-stix  <none>
ii  libgssapi-krb5-2       1.10.1+dfsg-2
ii  mozplugger             1.14.3-7

Versions of packages xulrunner-16.0 depends on:
ii  libasound2                1.0.25-4
ii  libatk1.0-0               2.4.0-2
ii  libbz2-1.0                1.0.6-4
ii  libc6                     2.13-35
ii  libcairo2                 1.12.2-2
ii  libdbus-1-3               1.6.0-1
ii  libdbus-glib-1-2          0.100-1
ii  libevent-2.0-5            2.0.19-stable-3
ii  libfontconfig1            2.9.0-7
ii  libfreetype6              2.4.9-1
ii  libgcc1                   1:4.7.1-7
ii  libgdk-pixbuf2.0-0        2.26.1-1
ii  libglib2.0-0              2.32.3-1
ii  libgtk2.0-0               2.24.10-2
ii  libhunspell-1.3-0         1.3.2-4
ii  libjpeg8                  8d-1
ii  libmozjs16d               16.0~b6-1
ii  libnotify4                0.7.5-1
ii  libnspr4                  2:4.9.2-1
ii  libnspr4-0d               2:4.9.2-1
ii  libnss3                   2:3.13.6-1
ii  libnss3-1d                2:3.13.6-1
ii  libpango1.0-0             1.30.0-1
ii  libpixman-1-0             0.26.0-3
ii  libsqlite3-0              3.7.13-1
ii  libstartup-notification0  0.12-1
ii  libstdc++6                4.7.1-7
ii  libvpx1                   1.1.0-1
ii  libx11-6                  2:1.5.0-1
ii  libxext6                  2:1.3.1-2
ii  libxrender1               1:0.9.7-1
ii  libxt6                    1:1.1.3-1
ii  zlib1g                    1:1.2.7.dfsg-13

Versions of packages xulrunner-16.0 suggests:
ii  libcanberra0  0.28-4
ii  libgnomeui-0  2.24.5-2

-- Configuration Files:
/etc/iceweasel/iceweaselrc changed [not included]
/etc/iceweasel/profile/bookmarks.html changed [not included]

-- no debconf information