Bug 29900 - [IE9] onclick in Update-Note is broken
[IE9] onclick in Update-Note is broken
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 3.1
Other Windows Server 2008
: P5 normal (vote)
: UCS 3.2-x
Assigned To: UMC maintainers
:
Depends on:
Blocks: 26507
  Show dependency treegraph
 
Reported: 2013-01-02 11:28 CET by Dirk Wiesenthal
Modified: 2016-10-10 14:26 CEST (History)
4 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Browser compatibility, Usability
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Wiesenthal univentionstaff 2013-01-02 11:28:42 CET
If UMC finds an Update, a note is shown in the overview:

Note: An update for UCS is available. Please visit Online Update Module to install the updates.

The link inside this note has some inline-JS: onclick="require(\'umc/app\').openModule(\'updater\')"

I did not get this to work on IE 9, although the JS itself works: The module opens if I copy&paste it into the IE 9 development console.
Comment 1 Dirk Wiesenthal univentionstaff 2013-01-02 16:59:51 CET
Fun fact: If clicking on the link, the label of the overview-tab changes afterwards (to "true" or "false", depending on whether or not you clicked outside the overview-tab)
Comment 2 Alexander Kläser univentionstaff 2013-01-03 11:26:56 CET
(In reply to comment #0)
> ...
> The link inside this note has some inline-JS:
> onclick="require(\'umc/app\').openModule(\'updater\')"

Shouldn't it be rather:

onclick="require('umc/app').openModule('updater')"

(In reply to comment #1)
> Fun fact: If clicking on the link, the label of the overview-tab changes
> afterwards (to "true" or "false", depending on whether or not you clicked
> outside the overview-tab)

Should it maybe then be something like:

onclick="require('umc/app').openModule('updater'); return true;"
Comment 3 Dirk Wiesenthal univentionstaff 2013-01-07 19:16:06 CET
(In reply to comment #2)
> Shouldn't it be rather:
> 
> onclick="require('umc/app').openModule('updater')"
> 

It is. I did not unescape the code.

Version: 9.0.8112.16421
Updateversion: 9.0.1 (KB2530548)
Windows 7

works fine, whilst

Version: 9.0.8112.16421
Updateversion: 9.0.11 (KB2761451)
Windows Server 2008

is broken.
Comment 4 Alexander Kläser univentionstaff 2013-01-08 09:12:48 CET
(In reply to comment #3)
> It is. I did not unescape the code.
> 
> Version: 9.0.8112.16421
> Updateversion: 9.0.1 (KB2530548)
> Windows 7
> 
> works fine, whilst
> 
> Version: 9.0.8112.16421
> Updateversion: 9.0.11 (KB2761451)
> Windows Server 2008
> 
> is broken.

Hm… I noticed also other problems with the IE-Version on Windows Server 2008 (e.g., see Bug 27414). Is this problem eventually fixed with a newer version of IE or a service pack update?
Comment 5 Dirk Wiesenthal univentionstaff 2013-01-31 19:15:27 CET
The link works fine with a new IE 9 installed on Windows 7

Version: 9.0.8112.16421
Updateversion: 9.0.12 (KB2761465)
Windows 7

This seems to be a problem with a (probably not up-to-date) Windows Server 2008 installation.

See also Bug#28498 - Dojo 1.7+ uses the native JSON implementation of the OS. This caused a Bug on old (not updated) Windows installations (seen on Windows XP and Windows Vista). I would rather close this bug as WONTFIX instead of digging into the Dojo code just to find out that a Windows update would have solved the problem.
Comment 6 Alexander Kläser univentionstaff 2013-02-04 09:09:45 CET
(In reply to comment #5)
> The link works fine with a new IE 9 installed on Windows 7
> 
> Version: 9.0.8112.16421
> Updateversion: 9.0.12 (KB2761465)
> Windows 7
> 
> This seems to be a problem with a (probably not up-to-date) Windows Server 2008
> installation.

Have you tried it on an updated 2008 system?
Comment 7 Dirk Wiesenthal univentionstaff 2013-02-04 13:02:36 CET
(In reply to comment #6)
> (In reply to comment #5)
> > The link works fine with a new IE 9 installed on Windows 7
> > 
> > Version: 9.0.8112.16421
> > Updateversion: 9.0.12 (KB2761465)
> > Windows 7
> > 
> > This seems to be a problem with a (probably not up-to-date) Windows Server 2008
> > installation.
> 
> Have you tried it on an updated 2008 system?

Not yet (I may not update the system), but the system was relatively new. The link works in the Windows 2008 - FF though...

The problem has nothing to do with require('umc/app').openModule('updater') itself. The link added with the fix for Bug#26507 does not work either.
Comment 8 Dirk Wiesenthal univentionstaff 2013-02-04 13:23:41 CET
Putting the code directly in javascript works slightly better:

This <a href="javascript:require(\'umc/app\').openModule(\'updater\')">works</a>.

At least the module is opened. But after that only the focused tab has a title. There is something seriously wrong with Windows Server 2008's IE 9.
Comment 9 Dirk Wiesenthal univentionstaff 2013-02-04 14:10:27 CET
(In reply to comment #8)
> Putting the code directly in javascript works slightly better:
> 
> This <a
> href="javascript:require(\'umc/app\').openModule(\'updater\')">works</a>.
> 
> At least the module is opened. But after that only the focused tab has a title.
> There is something seriously wrong with Windows Server 2008's IE 9.

Windows Server 2008 was updated, restarted. The behaviour changed a bit. The module is still opened, titles for both tabs (overview, updater) are shown. If you click on the overview tab again the title "Overview" vanishes! This sounds like arbitrary code execution. I am not sure if this can be fixed.

Using onclick does not work at all.
Comment 10 Alexander Kläser univentionstaff 2013-02-05 15:47:33 CET
(In reply to comment #9)
> (In reply to comment #8)
> > Putting the code directly in javascript works slightly better:
> > 
> > This <a
> > href="javascript:require(\'umc/app\').openModule(\'updater\')">works</a>.
> > 
> > At least the module is opened. But after that only the focused tab has a title.
> > There is something seriously wrong with Windows Server 2008's IE 9.
> 
> Windows Server 2008 was updated, restarted. The behaviour changed a bit. The
> module is still opened, titles for both tabs (overview, updater) are shown. If
> you click on the overview tab again the title "Overview" vanishes! This sounds
> like arbitrary code execution. I am not sure if this can be fixed.
> 
> Using onclick does not work at all.

I see as address javascript:void(0) and not the openModule() command. Is this correct?
Comment 11 Alexander Kläser univentionstaff 2013-02-05 16:42:20 CET
The links that refer to the policies work with Win 2008, the Administrator link does not. See also umc/modules/udm/DetailPage.js +839, maybe there is a difference in setting the value?
Comment 12 Dirk Wiesenthal univentionstaff 2013-02-05 17:27:39 CET
(In reply to comment #11)
> The links that refer to the policies work with Win 2008

Not really. The policy-module opens, but the tab is set 'disabled' (I did not know that this is possible...). Somehow the title code is somehow interfering with other code.
Comment 13 Dirk Wiesenthal univentionstaff 2013-02-05 17:28:42 CET
(In reply to comment #10)
> I see as address javascript:void(0) and not the openModule() command. Is this
> correct?

Yes, this was just a test. javascript:void(0) is what we do normally. I changed it locally because of curiosity.
Comment 14 Dirk Wiesenthal univentionstaff 2013-02-15 11:20:10 CET
This is probably an external issue. There seem to be some RDP interferences together with some (OS-) user privileges.

I repeat what I said before: I do not think we should fix this. The code itself seems to be correct.

But if we really want to try, univention-management-console-module-apps has a helper function _AnchorButton. At least this module does not suffer from this bug in my Windows Server 2008 IE 9 session. But will this really solve all issues on the platform when connected via rdesktop?
Comment 15 Stefan Gohmann univentionstaff 2013-02-26 07:07:55 CET
We should wait and see if the problem occurs in other environments.
Comment 16 Dirk Wiesenthal univentionstaff 2013-09-27 11:08:28 CEST
*** Bug 32700 has been marked as a duplicate of this bug. ***
Comment 17 Stefan Gohmann univentionstaff 2013-10-10 11:20:07 CEST
(In reply to Stefan Gohmann from comment #15)
> We should wait and see if the problem occurs in other environments.

Since it happened again → 3.2-x.
Comment 18 Florian Best univentionstaff 2016-10-10 13:36:01 CEST
Still reproducible?
Comment 19 Florian Best univentionstaff 2016-10-10 14:26:18 CEST
IE9 is not supported anymore.