Possibly related to a very old issue: http://jira.xwiki.org/jira/browse/XWIKI-1072 The issue: From within an IE6 iframe, xwiki makes some of it's file requests to the parent domain.(In my case, they have all been css file request.) My setup: XWiki Enterprise is running on an offsite server, publically available on the internet. On my local machine I am working on a website. The website contains an iframe that goes to the xwiki. When I load up my local website in IE6, these requests are sent to my local machine: GET /xwiki/bin/skin/skins/toucan/style.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/bin/skin/skins/toucan/print.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/bin/skin/skins/toucan/style%2Dkaki.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/resources/js/xwiki/suggest/ajaxSuggest.css - 404 330 - 0 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/resources/js/xwiki/fullscreenedit/fullscreenEdit.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/bin/skin/resources/js/xwiki/lightbox/lightbox.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome GET /xwiki/bin/skin/resources/js/xwiki/lightbox/lightboxIE.css - 404 330 - 1 http://192.168.0.109:8182 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) http://example.com/xwiki/bin/view/Guide-01/WebHome I do not see these requests while using the latest Opera or Firefox. Is this the IE6 iframe messing up some relative paths, or is xwiki actually sending the requests to the parent domain? -- View this message in context: http://n2.nabble.com/IE6-iframe-security-issue-tp2652428p2652428.html Sent from the XWiki- Users mailing list archive at Nabble.com.