Bug ID 530768: IE send requests to CSS imports when accessing responseXML of XMLHttpRequest

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Opened: Jun 30, 2015
Severity: 4-Minor

Symptoms

Unmangled request to a CSS file could be sent when accessing application through Portal Access. If the XML or XHTML document loaded with XMLHttpRequest contains any css style tags @import at-rules or <?xml-stylesheet type="text/css" ...?> declaration, Internet Explorer starting from v10 will try to load this file. In Portal Access we are doing rewriting of AJAX responses in browser Javascript code on demand, therefore CSS url in responseXML will be unmangled.

Impact

Cosmetic; browser could send unexpected unpatched requests. Failure of this request has no impact on the functionality of application.

Conditions

Document requested with XMLHttpRequest satisfies to following conditions: - content-type of response is xml or xhtml - response contains <style> tag with @import declarations - alternatively, response could contain <?xml-stylesheet type="text/css" src="..." ?> declaration - Application tries to access responseXML as a DOM tree

Workaround

None

Fix Information

None

Behavior Change