We have observed that after installation of KB3032359, some javascript + plugin interaction that worked previously, now fails. Here is a simple scenario where it is broken starting with this patch. It looks like plugins are no longer able to access various javascript objects when in compatibility mode, even when the site is in the Trusted Sites.
Two things to start with:
1. The site is in compatibility mode
2. The Adobe SVG plugin is installed and being used, download from http://www.adobe.com/devnet/svg/adobe-svg-viewer-download-area.html
The actual issue is in an much more complicated application that must be run in compatability mode with the Adobe SVG Plugin.
But here is the issue boiled down, it now throws SCRIPT70: Permission denied
=================== test.html ===================
<HTML><script>
document.write('<frameset cols="50%,50%,0">');
document.write(' <frame id="test1" name="test1" src="javascript:false">');
document.write(' <frame id="test2" name="test2" src="javascript:false">');
document.write('</frameset>');
d = new Date() ;
window.frames['test2'].location ="test2.html?" + d;</script></HTML>=================== test1.html ===================
<body bgcolor=green> Expected test1</body>
=================== test2.html ===================
<script>
function notify(evt){ alert(evt.target.id + " should now change frame 1 to test1.html") ; parent.frames.test1.location.href = "test1.html" ;
}</script><body bgcolor="000077" text="FFFFFF"><embed src="test2.svg" width="100%"></embed>
test 2, has a SVG that calls back to this page, and causes frame 1 to change to test1.html</body>=================== test2.svg ===================
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="100%" height="100%"><ellipse onclick="parent.notify(evt)" id="svgOval" cx="25%" cy="25%" rx="24%" ry="24%" fill="#000099" stroke="FFFFFF"/></svg>