JS API: Seeing SecurityError: "Blocked by a frame with origin..."

[Trevor]

Starting to see this error when starting up Rdio api:

"Uncaught SecurityError: Blocked a frame with origin "https://www.rdio.com" from accessing a frame with origin "http://[mydomain].com".  The frame requesting access has a protocol of "https", the frame being accessed has a protocol of "http". Protocols must match."

It appears to be coming from this line in one of the iFrames Rdio uses:
root.R.getEventProxy = root.parent.R.getEventProxy || function(proxyName, cb) {

Context:
root.R.getEventProxy = root.parent.R.getEventProxy || function(proxyName, cb) {
        function callCallback() {
            if (!proxies[proxyName]) {
                proxies[proxyName] = _.extend({}, Backbone.Events)
            }
            cb(proxies[proxyName])
        }
        if (window._ && window.Backbone) {
            callCallback()
        } else {
            initProxyCallbacks.push(callCallback)
        }
    };

root.parent is my window

[Trevor]

Tried hosting my app on https and got pretty much the same error, but instead this time it said the error is about mismatched domains.

[R. Kevin Nelson]

Hi Trevor,

Thanks for the report.  Something we deployed today wound up causing this error unexpectedly.  We'll be deploying a fix very shortly.

Sorry about the hiccup!

-- -- --

R. Kevin Nelson

API Engineer @ Rdio, Inc.

--
You received this message because you are subscribed to the Google Groups "Rdio API" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rdio-api+u...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/rdio-api/4dfc9224-5fde-4804-b7ec-1dfec7cf72c1%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[R. Kevin Nelson]

Looks like we've fixed the issue.  Please let us know if you see it pop up again.

Thanks for your patience,

Kevin

-- -- --

R. Kevin Nelson

API Engineer @ Rdio, Inc.

[Trevor]

Fix confirmed. Thanks!