KJKingJ
1 Nickel

Cross-Origin Frame Error on N1124/N1148 Web UI

When using a modern browser such as Chrome 67 or Firefox 61, the OpenManage Switch Administrator Web UI on the N1100 series of switches fails to show the the main panel - only the header and left hand navigation are shown. This prevents the usage of the Web UI for viewing information or changing the configuration (i.e. it's useless!).

Opening the Developer Tools in Chrome, the reason the main panel fails to load is due to a Cross-Origin Frame Access Violation. One of the loaded scripts attempts to access the main panel frame but this fails due to the violation.

The script in question seems to be Clarity.js - i'm assuming (hoping) however that this is a Dell-developed script and not the Microsoft Javascript library for user profiling/telemetry on webpages which would be a very odd thing to include on a switch administrative interface!

Due to this issue, It is only possible to use the Web UI via a less-secure browser that does not enforce Cross-Origin Frame protection such as IE11.

The switch(es) are running the latest publicly available version of code from Dell - 6.4.2.6.

Clarity.js:1123 Uncaught DOMException: Blocked a frame with origin "http://SWITCH-HOSTNAME" from accessing a cross-origin frame.
    at Object.hideAll (http://SWITCH-HOSTNAME/scripts/Clarity.js:1123:36)
    at globalStyleJS_LoadEnd (http://SWITCH-HOSTNAME/scripts/globalStyleJS.js:263:15)
    at deviceView_LoadEnd (http://SWITCH-HOSTNAME/scripts/deviceView.js:95:3)
    at xuiRunJSFunction (http://SWITCH-HOSTNAME/scripts/xui.js:40:14)
    at formLoad (http://SWITCH-HOSTNAME/scripts/_xe_deviceView.js:435:3)
    at onload (http://SWITCH-HOSTNAME/deviceView.html:18:49)

 

0 Kudos
4 Replies
Moderator
Moderator

Re: Cross-Origin Frame Error on N1124/N1148 Web UI

Does the switch still have an older firmware revision on the backup image? If so, are you able to boot to the older firmware and see if the same behavior is seen?

Daniel Covey
Dell EMC| Enterprise Support Services
Get support on Twitter:@DellCaresPRO
Download our QRL app:iOS, Android, Windows
Dell Networking Resources

0 Kudos
KJKingJ
1 Nickel

Re: Cross-Origin Frame Error on N1124/N1148 Web UI

I'm afraid I no longer have any switch with an older version in the backup partition, but from memory this also occurred previously - it's only now that i've finally gotten around reporting the issue.

0 Kudos
Moderator
Moderator

Re: Cross-Origin Frame Error on N1124/N1148 Web UI

Thanks for reporting your findings. I will be sure this information is provided to our engineering team for further review.

Daniel Covey
Dell EMC| Enterprise Support Services
Get support on Twitter:@DellCaresPRO
Download our QRL app:iOS, Android, Windows
Dell Networking Resources

0 Kudos
KJKingJ
1 Nickel

Re: Cross-Origin Frame Error on N1124/N1148 Web UI

Thanks Daniel, it should be quite easy for them to reproduce but i'm happy to try things and report back if they need more information.

0 Kudos