<font size=2 face="sans-serif">We have recently upgraded our monitoring
server from 4.3.17 to 4.3.27 and now getting " is sandboxed,
and the 'allow-scripts' keyword is not set." errors in modern Chrome</font>
<br><font size=2 face="sans-serif">for svcstatus.sh pages</font>
<br>
<br><font size=2 face="sans-serif">Let me explain:</font>
<br><font size=2 face="sans-serif">Some our custom tests may generate large
content with detailed technical information, which is not always required
to show on web-page.</font>
<br><font size=2 face="sans-serif">monitoring test generate HTML content
with DIV having </font><tt><font size=3>style</font></tt><tt><font size=3 color=#800080>='</font></tt><tt><font size=3>display:
none</font></tt><tt><font size=3 color=#800080>'</font></tt><font size=3 face="Arial">
</font>
<br>
<br><font size=2 face="sans-serif">HTML content also contains <A HREF>
element with java script function call to show DIV content on click (or
hide on click again)</font>
<br><font size=2 face="sans-serif">Appropriate java script function is
placed in page header - it was placed in HEAD element - in </font>
<br><font size=2 face="sans-serif">./server/web/hostsvc_header</font>
<br><font size=2 face="sans-serif">./server/web/histlog_header</font>
<br>
<br><font size=2 face="sans-serif">so generated header is the following:</font>
<br><font size=2 face="sans-serif">==============</font>
<br><font size=2 face="sans-serif"><HEAD></font>
<br><font size=2 face="sans-serif"><META HTTP-EQUIV="REFRESH"
CONTENT="60"></font>
<br><font size=2 face="sans-serif"><META HTTP-EQUIV="EXPIRES"
CONTENT="Sat, 01 Jan 2001 00:00:00 GMT"></font>
<br><font size=2 face="sans-serif"><META HTTP-EQUIV="Set-Cookie"
CONTENT="pagepath=; path=/"></font>
<br><font size=2 face="sans-serif"><META HTTP-EQUIV="Set-Cookie"
CONTENT="host=target-hostname; path=/"></font>
<br><font size=2 face="sans-serif"><TITLE>yellow : Xymon - dbinvobj
status forhost=target-hostname (10.*.*.*) @ Thu Jan 12 19:07:47 2017</TITLE></font>
<br>
<br><font size=2 face="sans-serif"><!-- Styles for the Xymon body --></font>
<br><font size=2 face="sans-serif"><link rel="stylesheet"
type="text/css" href="/xymon/gifs/xymonbody.css"></font>
<br>
<br><font size=2 face="sans-serif"><!-- Styles for the menu bar --></font>
<br><font size=2 face="sans-serif"><link rel="stylesheet"
type="text/css" href="/xymon/menu/xymonmenu-blue.css"></font>
<br>
<br><font size=2 face="sans-serif"><!-- The favicon image --></font>
<br><font size=2 face="sans-serif"><link rel="shortcut icon"
href="/xymon/gifs/favicon-yellow.ico"></font>
<br>
<br><font size=2 face="sans-serif"><!-- CoMinder customisation --></font>
<br><font size=2 face="sans-serif"><script language="JavaScript1.2"
type="text/javascript"></font>
<br><font size=2 face="sans-serif">function toggle_div(p_DivName,p_LinkName,p_showCaption,p_HideCaption)
{</font>
<br><font size=2 face="sans-serif"> var div_element
= document.getElementById(p_DivName);</font>
<br><font size=2 face="sans-serif"> var text
= document.getElementById(p_LinkName);</font>
<br><font size=2 face="sans-serif"> if(div_element.style.display
== "block") {</font>
<br><font size=2 face="sans-serif"> div_element.style.display
= "none";</font>
<br><font size=2 face="sans-serif">
text.innerHTML = p_showCaption;</font>
<br><font size=2 face="sans-serif"> }</font>
<br><font size=2 face="sans-serif"> else {</font>
<br><font size=2 face="sans-serif">
div_element.style.display = "block";</font>
<br><font size=2 face="sans-serif">
text.innerHTML = p_HideCaption;</font>
<br><font size=2 face="sans-serif"> }</font>
<br><font size=2 face="sans-serif">}</font>
<br><font size=2 face="sans-serif"></script></font>
<br><font size=2 face="sans-serif"><!-- end of CoMinder customisation
--></font>
<br>
<br><font size=2 face="sans-serif"></HEAD></font>
<br><font size=2 face="sans-serif">==============</font>
<br>
<br><font size=2 face="sans-serif"><br>
It was working fine in 4.3.17 (really we still have one monitoring server
of that version and it is working)</font>
<br><font size=2 face="sans-serif">In 4.3.27 - we get the following errors
in latest Chrome and our java script function is not working (nothing
happens)</font>
<br>
<br><font size=2 face="sans-serif"><br>
1)</font>
<br><font size=2 face="sans-serif">Refused to execute the redirect specified
via '<meta http-equiv='refresh' content='...'>'. The document is
sandboxed, and the 'allow-scripts' keyword is not set.</font>
<br>
<br><font size=2 face="sans-serif">2) </font>
<br><font size=2 face="sans-serif">Blocked script execution in 'https://myhostname:port/xymon-cgi/svcstatus.sh?HOST=target-hostname&SERVICE=custmetric'
because the document's frame is sandboxed and the 'allow-scripts' permission
is not set.</font>
<br>
<br>
<br><font size=2 face="sans-serif">Note: old Opera (before Chromium), old
(2013) Chrome and more or less modern FireFox ESR does not have such problem.</font>
<br>
<br>
<br><font size=2 face="sans-serif">I have found similar thread for [Xymon]
4.3.25 - ouch (reverting to 4.3.22), but not identical and it looks like
final solution was not found.</font>
<br><a href="http://lists.xymon.com/archive/2016-February/043013.html"><font size=2 color=blue face="sans-serif">http://lists.xymon.com/archive/2016-February/043013.html</font></a>
<br>
<br><font size=2 face="sans-serif">I have compared pages sources from XyMon
4.3.17 and 4.3.27 for the same content.</font>
<br><font size=2 face="sans-serif">and the difference is only 1 line, which
IMHO should not affect - 1 menu item added in 4.3.27:</font>
<br><font size=2 face="sans-serif"><a class="inner" href="/xymon-cgi/acknowledgements.sh">Acknowledgements</a></font>
<br>
<br><font size=2 face="sans-serif">If I save both pages locally as HTML
file and open in Chrome - java script function is working and there are
no "sandboxed" errors.</font>
<br>
<br>
<br><font size=2 face="Verdana">Best regards,</font>
<br>
<br><font size=2 face="Verdana">Andrey Chervonets</font>
<br><font size=2 face="Verdana">----------------------</font>
<br><font size=2 face="Verdana">SIA CoMinder</font>
<br><a href=http://www.cominder.eu/><font size=2 color=blue face="Verdana">http://www.cominder.eu/</font></a>
<br><font size=2 face="Verdana">mobile: +371 26517848</font>
<br>
<br><font size=2 face="sans-serif"> </font>
<br>
<br>