"Permission denied" error message when you read properties of the Location object that is inside an HTML Application (816885)

SYMPTOMS

When you read certain properties of the Location object that is inside an HTML Application (HTA), you may receive a "Permission denied" error message. The relevant properties of the Location object include:

Location.href
Location.hostname
Location.reload

Note You may notice this error only if you use an automatic configuration script in the Local Area Network (LAN) settings of Microsoft Internet Explorer.

If debugging tools are installed on your computer, you may receive an error message that is similar to the following:

A Runtime Error has occurred. Do you wish to Debug? Line 12 Error: Permission denied

If debugging tools are not installed on your computer, you may receive an error message that is similar to the following:

An error has occurred in the script on this page. Line: 13 Char: 2 Error: Permission denied Code: 0 URL: http://WebServer/FileName.hta Do you want to continue running scripts on this page?

Note You may notice this problem only if your automatic configuration script has the DIRECT value.

RESOLUTION

To resolve this problem, use any of the following methods:

Note The following methods are based on the sample that is mentioned in the "More Information" section of this article. Therefore, the code and the file names in these methods may differ from your code and from your file names.

Hard code a proxy server in the Proxy server settings of Internet Explorer instead of using an automatic configuration script, and then press F5 to refresh the HTA in the browser.
Use a host name instead of a Fully Qualified Domain Name (FQDN) to access the path to the HTA.
Use an IP address to access the HTA.
Add the Web site that you are accessing to the Trusted zone or to the Restricted zone.
Do not use the Location object in your code.
Click to clear the Include all sites that bypass the proxy server check box in the Security settings of Internet Explorer.

MORE INFORMATION

Steps to reproduce the behavior

Start Internet Explorer.
On the Tools menu, click Internet Options.
On the Connections tab, click LAN Settings.
In the Local Area Network (LAN) settings dialog box, click to select the Use automatic configuration script check box. Make sure that none of the other check boxes is selected.
In the Address box, type the path to the automatic configuration script.
Use Notepad to create a text file that is named Default.hta.

Add the following HTML code to the Default.hta file:

<html>
<head> 
<title>HTA Location.href bug reproduction</title>

<HTA:APPLICATION ID="oBugRepro" APPLICATIONNAME="BugRepro">

<SCRIPT LANGUAGE="JavaScript">
function ShowFrame()
{
var strLocation;
strLocation = top.fraTabs.location.href; 
}
</SCRIPT>
</head>

<frameset id="fstWorkAreaMain" name="fstWorkAreaMain" rows="40%,60%">

<frame src="about:blank" id="fraTabs" name="fraTabs" APPLICATION="yes">
<frame src="Main.htm" id="fraMain" NAME="fraMain" APPLICATION="yes">

</frameset>

</html>

Use Notepad to create a text file that is named Main.htm.

Add the following HTML code to the Main.htm file:

<HTML>
<BODY style="background-color:gainsboro">

<P>Main frame</P>

<input id="cmdButton" type="button" onclick="top.ShowFrame()" value="Click me to reproduce the behavior"></input>

</BODY>
</HTML>

Place the two files, Default.hta and Main.htm, in a virtual directory that is named HTARepro on a Web server.
Make sure that you have enabled anonymous access to the contents of the HTARepro virtual directory.
Type the following command at a command prompt:
mshta.exe http://WebServer/HTARepro/Default.hta
Note Replace WebServer with the FQDN of the Web server that you are using.
On the HTA application, click Click me to reproduce the behavior. You receive one of the error messages that are mentioned in the "Symptoms" section of this article.

REFERENCES

For more information, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn.microsoft.com/library/default.asp?url=/workshop/author/hta/overview/htaoverview.asp

For additional information, click the following article number to view the article in the Microsoft Knowledge Base: