[Qt-interest] AJAX requests from local files to network stopped working in 4.6

Alexander Vassilev avasilev at voipgate.com
Mon Dec 7 15:25:09 CET 2009


Hi all,

I have the following problem. I have upgraded my application to qt 4.6. 
The application embeds qtwebkit and it loads some local html and 
javascript files, which do XMLHTTP requests over the network. With 
qtwebkit 4.5.x I had no problems doing so, no cross-site scripting 
blocking by webkit, everything just worked (i did security control by 
myself). With qt 4.6 however, I get an empty responseText of the 
XMLHttpRequest object. Just to be sure its not the javascript code that 
causes the problem, I ran a qt-4.5.x version of my app on the same html 
and it nicely got the xmlhttp reply. Again, ran the qt-4.6 version, and 
it got an empty response string. I have checked that the xssAuditor is 
not enabled in qtwebkit (by accessing internals of webkit). My question 
is, what is blocking my xmlhttp request and is there a way to disable 
this security feature, like it was in qt-4.5? I have access to webkit 
internals, so the absence of a qtwebkit API to control the xss blocking 
would not be a problem, as long as there is a generic WebKit API to do so.

Thanks in advance
Alex

-------------- next part --------------
A non-text attachment was scrubbed...
Name: avasilev.vcf
Type: text/x-vcard
Size: 134 bytes
Desc: not available
Url : http://lists.qt-project.org/pipermail/qt-interest-old/attachments/20091207/90096e70/attachment.vcf 


More information about the Qt-interest-old mailing list