Search completed in 0.92 seconds.
39 results for "SecurityError":
Your results are loading. Please wait...
Storage access policy: Block cookies from trackers
dom storage: localstorage: window.localstorage: read and write attempts throw a securityerror exception.
... indexeddb: attempting to access the indexeddb factory object throws a securityerror exception.
... messaging and workers: broadcast channel: attempts to create a new broadcastchannel will throw a securityerror exception.
...And 3 more matches
Sensor APIs - Web APIs
if (error.name === 'securityerror') { // see the note above about feature policy.
...}); an alternative approach is to attempt to use the error and listen for the securityerror.
... const sensor = new absoluteorientationsensor(); sensor.start(); sensor.onerror = event => { if (event.error.name === 'securityerror') console.log("no permissions to use absoluteorientationsensor."); }; the following table describes for each sensor type, the name required for the permissions api, the <iframe> element's allow attribute and the feature-policy directive.
CanvasRenderingContext2D.getImageData() - Web APIs
securityerror the canvas contains or may contain pixels which were loaded from an origin other than the one from which the document itself was loaded.
... to avoid securityerror being thrown in this situation, configure cors to allow the source image to be used in this way.
MediaDevices.getUserMedia() - Web APIs
older versions of the specification used securityerror for this instead; securityerror has taken on a new meaning.
... securityerror user media support is disabled on the document on which getusermedia() was called.
MediaRecorder.onerror - Web APIs
securityerror the mediastream is configured to disallow recording.
...try again later."); break; case securityerror: shownotification("recording the specified source " + "is not allowed due to security " + "restrictions."); break; default: shownotification("a problem occurred while trying " + "to record the video."); break; } }; /* this would be a good place to create a worker to handle ...
PaymentRequest.show() - Web APIs
securityerror the promise rejects with a securityerror if the call to show() was not in response to a user action, such as a click or keyup event.
... other reasons a securityerror may be thrown are at the discretion of the user agent, and may include situations such as too many calls to show() being made in a short time or show() being called while payment requests are blocked by parental controls.
Signaling and video calling - Web APIs
function handlegetusermediaerror(e) { switch(e.name) { case "notfounderror": alert("unable to open your call because no camera and/or microphone" + "were found."); break; case "securityerror": case "permissiondeniederror": // do nothing; this is the same as the user canceling the call.
...in this example, we ignore "securityerror" and "permissiondeniederror" results, treating refusal to grant permission to use the media hardware the same as the user canceling the call.
How to check the security state of an XMLHTTPRequest over SSL - Web APIs
e = 'securityuntrustedcertificateissuererror'; break; case 90: // sec_error_inadequate_key_usage, sec(90) errname = 'securityinadequatekeyusageerror'; break; case 176: // sec_error_cert_signature_algorithm_disabled, sec(176) errname = 'securitycertificatesignaturealgorithmdisablederror'; break; default: errname = 'securityerror'; break; } } else { // calculating the difference let sslerr = math.abs(nsinsserrorsservice.nss_ssl_error_base) - (status & 0xffff); switch (sslerr) { case 3: // ssl_error_no_certificate, ssl(3) errname = 'securitynocertificateerror'; break; case 4: // ssl_error_bad_certificate, ssl(4) errname = 'securitybadcertifi...
...te_type, ssl(8) errname = 'securityunsupportedcertificatetypeerror'; break; case 9: // ssl_error_unsupported_version, ssl(9) errname = 'securityunsupportedtlsversionerror'; break; case 12: // ssl_error_bad_cert_domain, ssl(12) errname = 'securitycertificatedomainmismatcherror'; break; default: errname = 'securityerror'; break; } } } else { errtype = 'network'; switch (status) { // connect to host:port failed case 0x804b000c: // ns_error_connection_refused, network(13) errname = 'connectionrefusederror'; break; // network timeout error case 0x804b000e: // ns_error_net_timeout, network(14) errname = 'networktimeouterror'; break...
Feature-Policy - HTTP
when this policy is disabled, attempting to set document.domain will fail and cause a securityerror domexception to be be thrown.
...when this policy is enabled, the paymentrequest() constructor will throw a securityerror domexception.
Index - HTTP
WebHTTPHeadersIndex
when this policy is enabled, the paymentrequest() constructor will throw a securityerror.
...when this policy is enabled, attempting to set document.domain will fail and cause a securityerror domexception to be be thrown.
HTTP Index - HTTP
WebHTTPIndex
when this policy is enabled, attempting to set document.domain will fail and cause a securityerror domexception to be be thrown.
...when this policy is disabled, the paymentrequest() constructor will throw a securityerror.
Bluetooth.requestDevice() - Web APIs
securityerror this operation is not permitted in this context due to security concerns.
CSSStyleSheet - Web APIs
notes in some browsers, if a stylesheet is loaded from a different domain, accessing cssrules results in securityerror.
CacheStorage - Web APIs
note: cachestorage always rejects with a securityerror on untrusted origins (i.e.
CanvasCaptureMediaStreamTrack.requestFrame() - Web APIs
this may change in the future, so it would be wise to plan ahead and watch for exceptions such as securityerror (although the specific error that might be thrown is not mentioned in the spec, this is a likely candidate).
DOMError - Web APIs
WebAPIDOMError
securityerror the operation is insecure.
DOMException - Web APIs
securityerror the operation is insecure.
Document.domain - Web APIs
WebAPIDocumentdomain
exceptions securityerror an attempt has been made to set domain under one of the following conditions: the document is inside a sandboxed <iframe> the document has no browsing context the document's effective domain is null the given value is not equal to the document's effective domain (or it is not a registerable domain suffix of it) the document-domain feature-policy is enabled examples getting the domain ...
FileReaderSync.readAsArrayBuffer() - Web APIs
securityerror is raised when one of the following problematic situation is detected: the resource has been modified by a third party; too many read are performed simultaneously; the file pointed by the resource is unsafe for a use from the web (like it is a system file).
FileReaderSync.readAsBinaryString() - Web APIs
securityerror is raised when one of the following problematic situation is detected: the resource has been modified by a third party; too many read are performed simultaneously; the file pointed by the resource is unsafe for a use from the web (like it is a system file).
FileReaderSync.readAsDataURL() - Web APIs
securityerror is raised when one of the following problematic situation is detected: the resource has been modified by a third party; too many read are performed simultaneously; the file pointed by the resource is unsafe for a use from the web (like it is a system file).
FileReaderSync.readAsText() - Web APIs
securityerror is raised when one of the following problematic situation is detected: the resource has been modified by a third party; too many read are performed simultaneously; the file pointed by the resource is unsafe for a use from the web (like it is a system file).
HTMLCanvasElement.toBlob() - Web APIs
exceptions securityerror the canvas's bitmap is not origin clean; at least some of its contents come from secure examples getting a file representing the canvas once you have drawn content into a canvas, you can convert it into a file of any supported image format.
HTMLCanvasElement.toDataURL() - Web APIs
exceptions securityerror the canvas's bitmap is not origin clean; at least some of its contents have or may have been loaded from a site other than the one from which the document itself was loaded.
databases - Web APIs
exceptions this method may raise a domexception of the following types: attribute description securityerror the method is called from an opaque origin.
MediaRecorder.start() - Web APIs
securityerror the mediastream is configured to disallow recording.
MediaRecorderErrorEvent.error - Web APIs
securityerror the mediastream is configured to disallow recording.
Navigator.getBattery() - Web APIs
exceptions this method doesn't throw true exceptions; instead, it rejects the returned promise, passing into it a domexception whose name is one of the following: securityerror the user agent does not expose battery information to insecure contexts and this method was called from insecure context.
Navigator.registerProtocolHandler() - Web APIs
exceptions securityerror the user agent blocked the registration.
SharedWorker() - Web APIs
exceptions a securityerror is raised if the document is not allowed to start workers, for example if the url has an invalid syntax or if the same-origin policy is violated.
Writing WebSocket client applications - Web APIs
the constructor will throw a securityerror if the destination doesn't allow access.
WebXR permissions and security - Web APIs
otherwise, an appropriate exception is thrown, such as securityerror if the document doesn't have permission to enter immersive mode.
Window.localStorage - Web APIs
exceptions securityerror the request violates a policy decision, or the origin is not a valid scheme/host/port tuple (this can happen if the origin uses the file: or data: scheme, for example).
Window.sessionStorage - Web APIs
exceptions securityerror the request violates a policy decision, or the origin is not a valid scheme/host/port tuple (this can happen if the origin uses the file: or data: scheme, for example).
Worker() - Web APIs
WebAPIWorkerWorker
exceptions a securityerror is raised if the document is not allowed to start workers, e.g.
XRSystem: isSessionSupported() - Web APIs
securityerror the document's origin does not have permission to use the xr-spatial-tracking feature policy.
XRSystem: requestSession() - Web APIs
securityerror permission to enter the specified xr mode is denied.
Allowing cross-origin use of images and canvas - HTML: Hypertext Markup Language
calling any of the following on a tainted canvas will result in an error: calling getimagedata() on the canvas's context calling toblob() on the <canvas> element itself calling todataurl() on the canvas attempting any of these when the canvas is tainted will cause a securityerror to be thrown.
Feature-Policy: document-domain - HTTP
when this policy is enabled, attempting to set document.domain will fail and cause a securityerror domexception to be be thrown.