Zeronet: Error: Permission denied to access property "document"

Created on 3 Jan 2018 · 6Comments · Source: HelloZeroNet/ZeroNet

Step 1: Please describe your environment

ZeroNet version: 0.6.0 (rev3178)
Operating system: Windows 10
Web browser: Firefox / Chrome / Tor Browser
Tor status: not available/always
Opened port: no
Special configuration: -

Step 2: Describe the problem:

I wanted to try and port a Javascript (VueJS) app to ZeroNet, but I got the following error:
Error: Permission denied to access property "document"
There was attempt to access an object for which you have no permission. This is likely an element loaded from a different domain for which you violated the same-origin policy.</strong></p> <p>Is it possible to host in ZeroNet Javascript apps? </p> <h4>Steps to reproduce:</h4> <ol> <li>For example, a well know example in VueJS is: <a rel="nofollow noopener" target="_blank" href="https://github.com/vuejs/vue-hackernews-2.0/">https://github.com/vuejs/vue-hackernews-2.0/</a></li> <li>The production files for that project are generated by running: npm run build.</li> <li>Create a new ZeroNet site.</li> <li>Copy the generated dist folder to the new site, and add the script in index.html.</li> <li>Sign content.json</li> <li>Try to open the website.</li> </ol> <h4>Observed Results:</h4> <p>I get the following message in Firefox console:<br /> SecurityError: Permission denied to access property "document" on cross-origin object</p> <p>In Tor Browser:<br /> Error: Permission denied to access property "document"</p> <p>Additional information: There was attempt to access an object for which you have no permission. This is likely an <iframe> element loaded from a different domain for which you violated the same-origin policy.</p> <h4>Expected Results:</h4> <p>Run the application without errors.</p> <p>English is not my mother tongue; please excuse any errors on my part.</p> </div> <div> <div class="float-right"> <a class="text-muted" href="https://www.github.com/HelloZeroNet/ZeroNet/issues/1236" rel="nofollow noreferrer" target="_blank" onclick="dataLayer.push({'event': 'GAEvent', 'eventCategory': 'click', 'eventAction': 'source_bottom', 'eventLabel': 'Source Bottom', 'eventValue': undefined});">Source</a> </div> </div> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/35066802?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt=" picture"> <strong>Rtnd</strong> </div> <div class="col text-right"> </div> </div> </div> </div> </div> <div class="col-12"> <div id="ph-above-best-comment"> </div> </div> <div class="col-12 mb-4 best-comment"> <div> <h2 class="mb-3"><i class="fas fa-check mr-2"></i>Most helpful comment</h2> </div> <div class="card card-custom border-lg-success mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p><strong>@krixano</strong> Not Vue, but maybe some plugin is generating incorrect code.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/16370781?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt=" picture"> <strong>imachug</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">2</span> </div> </div> </div> </div> </div> <div class="col-12"> <div class="mb-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="9295564578" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="col-12 d-flex align-items-center mb-4"> <h2>All 6 comments</h2> </div> <div class="col-12"> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>ZeroNet opens all your HTML files in <code><iframe></code>, so some things don't work because of SecurityError's. For example, <code>top.isRemotePresenter</code> throws an error. I'll try look what makes that error in Vue, but that may result in changing built code.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/16370781?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="imachug picture"> <strong>imachug</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>Can you show your <code>index.html</code>?</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/16370781?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="imachug picture"> <strong>imachug</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>Afaik, Vue by itself shouldn't have any problems as I use vue for all of my zites without having to change the library in any way.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/4098042?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="krixano picture"> <strong>krixano</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">2</span> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p><strong>@krixano</strong> Not Vue, but maybe some plugin is generating incorrect code.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/16370781?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="imachug picture"> <strong>imachug</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">2</span> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p><strong>@imachug</strong> Yeah, it could definitely be a Vue plugin.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/4098042?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="krixano picture"> <strong>krixano</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> 👍<span class="ml-2 mr-3">1</span> </div> </div> </div> </div> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown"> <p>The Firebase plugin was the problem. After disabling it I can see the website inside ZeroNet.</p> <p>Thank you.</p> </div> <div class="card-footer"> <div class="row"> <div class="col"> <img src="https://avatars.githubusercontent.com/u/35066802?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="Rtnd picture"> <strong>Rtnd</strong> <span class="text-muted ml-1">on 4 Jan 2018</span> </div> <div class="col text-right"> </div> </div> </div> </div> </div> <div class="col-12"> <div class="card card-custom mb-4"> <div class="card-body pt-3 pb-3 markdown text-center helpful"> <div class="title">Was this page helpful?</div> <div class="mt-1" onMouseLeave="rating(285675480, 0);"> <i class="fas fa-star inactive" id="star-1" onMouseOver="rating(285675480, 1);" onclick="rate(285675480, 1);"></i> <i class="fas fa-star inactive" id="star-2" onMouseOver="rating(285675480, 2);" onclick="rate(285675480, 2);"></i> <i class="fas fa-star inactive" id="star-3" onMouseOver="rating(285675480, 3);" onclick="rate(285675480, 3);"></i> <i class="fas fa-star inactive" id="star-4" onMouseOver="rating(285675480, 4);" onclick="rate(285675480, 4);"></i> <i class="fas fa-star inactive" id="star-5" onMouseOver="rating(285675480, 5);" onclick="rate(285675480, 5);"></i> </div> <div class="description text-small"><span id="rating-val">0</span> / 5 - <span id="rating-count">0</span> ratings</div> </div> </div> <div class="mb-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3452512275" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> </div> </div> <div class="col-12 col-lg-4"> <div id="ph-above-related"></div> <div class="card card-custom issue-box"> <div class="card-body pt-3 pb-5"> <h2 class="mb-4">Related issues</h2> <div> <strong> <a href="/zeronet/156591890/please-delete-upnp-forwards-when-zeronet-exits-gracefully">Please delete UPnP forwards when zeronet exits gracefully</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/271906?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="yurivict picture"> <strong class="pr-1" dir="ltr">yurivict</strong>  ·  <span class="px-1" dir="ltr">4</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/zeronet/146111001/zerohello-favorite-sites-in-sites-json">ZeroHello favorite sites in sites.json</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/18291483?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="sermont picture"> <strong class="pr-1" dir="ltr">sermont</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/zeronet/171075500/nameerror-name-protocol-sslv3-is-not-defined">NameError: name 'PROTOCOL_SSLv3' is not defined</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/426427?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="iShift picture"> <strong class="pr-1" dir="ltr">iShift</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/zeronet/193647374/macos-client-requires-administrator-account-to-use">MacOS client requires administrator account to use.</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/6404250?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="Forbo picture"> <strong class="pr-1" dir="ltr">Forbo</strong>  ·  <span class="px-1" dir="ltr">3</span><span>Comments</span> </div> <hr /> <div> <strong> <a href="/zeronet/196333494/i-think-zeronet-should-add-a-ballon-tips-when-receive-new">I think zeronet should add a ballon tips when receive new message from zeromail</a> </strong> </div> <div class="text-muted text-small mt-2"> <img src="https://avatars.githubusercontent.com/u/15062548?v=4&s=40" style="width:20px; height:20px;" class="mr-2 rounded float-left" alt="cxgreat2014 picture"> <strong class="pr-1" dir="ltr">cxgreat2014</strong>  ·  <span class="px-1" dir="ltr">4</span><span>Comments</span> </div> </div> </div> <div class="sticky-top pt-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3919948963" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> <div id="ph-below-related-2" class="mt-4"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="3919948963" data-ad-format="auto" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> </div> <div class="col-12 col-lg-4"> </div> </div> <div class="skyscraper-container"> <ins class="adsbygoogle" style="display:block" data-ad-client="ca-pub-3835332123789605" data-ad-slot="7879185320" data-ad-format="vertical" data-full-width-responsive="true"></ins> <script> (adsbygoogle = window.adsbygoogle || []).push({}); </script> </div> </div> <div class="mt-5 spacer"></div> <footer class="mt-5 pb-2 py-4 text-center mt-auto"> <div class="container"> <a class="navbar-brand logo mr-5" href="/"> <img src="/assets/img/logo.svg" width="40" height="40" alt="bleepingcoder logo"> bleeping<strong>coder</strong> </a> <div class="mt-4"> bleepingcoder.com uses publicly licensed GitHub information to provide developers around the world with solutions to their problems. We are not affiliated with GitHub, Inc. or with any developers who use GitHub for their projects. We do not host any of the videos or images on our servers. All rights belong to their respective owners. </div> <div> Source for this page: <a href="https://www.github.com/HelloZeroNet/ZeroNet/issues/1236" rel="nofollow noreferrer" target="_blank">Source</a> </div> </div> <hr class="mb-5 mt-5"> <div class="container"> <div class="row"> <div class="col-sm-4 col-lg mb-sm-0 mb-5"> <strong>Popular programming languages</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/python" dir="ltr">Python</a> </li> <li class="mb-2"> <a href="/javascript" dir="ltr">JavaScript</a> </li> <li class="mb-2"> <a href="/typescript" dir="ltr">TypeScript</a> </li> <li class="mb-2"> <a href="/cpp" dir="ltr">C++</a> </li> <li class="mb-2"> <a href="/csharp" dir="ltr">C#</a> </li> </ul> </div> <div class="col-sm-4 col-lg mb-sm-0 mb-5"> <strong>Popular GitHub projects</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/microsoft/vscode" dir="ltr">vscode</a> </li> <li class="mb-2"> <a href="/numpy/numpy" dir="ltr">numpy</a> </li> <li class="mb-2"> <a href="/ant-design/ant-design" dir="ltr">ant-design</a> </li> <li class="mb-2"> <a href="/mui-org/material-ui" dir="ltr">material-ui</a> </li> <li class="mb-2"> <a href="/vercel/next-js" dir="ltr">next.js</a> </li> </ul> </div> <div class="col-sm-4 col-lg mb-0"> <strong>More GitHub projects</strong> <ul class="list-unstyled mb-0 mt-2"> <li class="mb-2"> <a href="/rust-lang/rust" dir="ltr">rust</a> </li> <li class="mb-2"> <a href="/moment/moment" dir="ltr">moment</a> </li> <li class="mb-2"> <a href="/yarnpkg/yarn" dir="ltr">yarn</a> </li> <li class="mb-2"> <a href="/mozilla/pdf-js" dir="ltr">pdf.js</a> </li> <li class="mb-2"> <a href="/JuliaLang/julia" dir="ltr">julia</a> </li> </ul> </div> </div> </div> <hr class="mb-5 mt-5"> <div class="container text-muted"> © 2026 bleepingcoder.com - <a href="/bleeps" rel="nofollow">Contact</a><br /> By using our site, you acknowledge that you have read and understand our <a href="/cookies" rel="nofollow">Cookie Policy</a> and <a href="/privacy" rel="nofollow">Privacy Policy</a>. </div> </footer> <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js" integrity="sha256-4+XzXVhsDmqanXGHaHvgh1gMQKX40OUvDEBTu8JcmNs=" crossorigin="anonymous"></script> <script async src="https://cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js" integrity="sha384-Q6E9RHvbIyZFJoft+2mJbHaEWldlvI9IOYy5n3zV9zzTtmI3UksdQRVvoxMfooAo" crossorigin="anonymous"></script> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js" integrity="sha384-wfSDF2E50Y2D1uUdj0O3uMBJnjuUD4Ih7YwaYd1iqfktj0Uod8GCExl3Og8ifwB6" crossorigin="anonymous"></script>  <script type="text/javascript" src="/assets/js/main.js"></script> <script src="https://cdn.jsdelivr.net/gh/google/code-prettify@master/loader/run_prettify.js"></script></body> </html>