Facebook iFrame security error (document.domain) raised by hasPasswordField_

We have a project that uses the standard Facebook API, used mainly for login and registration. Since we use Sentry to receive error notification, the following often appears (on the home page):

SecurityError: Blocked a frame with origin "https://www.mywebsite.com" from accessing a 
frame with origin "https://www.facebook.com". The frame being 
accessed set "document.domain" to "facebook.com", but the frame requesting access did not. 
Both must set "document.domain" to the same value to allow access.
at hasPasswordField_ (/en:1:368)
at hasPasswordField_ (/en:1:499)
at findPasswordForms (/en:1:173)
at global code (/en:10:27)

This is strange because the methods

 hasPasswordField_ / findPasswordForms

do not exist in the project code.

Since the error currently only occurs on

iOS Chrome Mobile Version: 59.0.3071 | 60.0.3112

Is there an internal Chrome component that is trying to access Facebook’s iFrame or is Facebook looking for some password fields on a web page?

UPDATE: Sentry GIT: https://github.com/getsentry/sentry/issues/5267 .

, -? !

+6
1
+1

All Articles