[webkit-changes] [WebKit/WebKit] 562c83: Cherry-pick 256843.2 at webkit-2022.12-embargoed (155...

[Claudio Saavedra]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 562c83b8958666e8fb3d74344129490b96e3db9c
      https://github.com/WebKit/WebKit/commit/562c83b8958666e8fb3d74344129490b96e3db9c
  Author: Claudio Saavedra <csaavedra at igalia.com>
  Date:   2023-01-25 (Wed, 25 Jan 2023)

  Changed paths:
    A LayoutTests/http/tests/security/embedded-self-reference-after-url-modified-expected.txt
    A LayoutTests/http/tests/security/embedded-self-reference-after-url-modified.html
    M Source/WebCore/html/HTMLFrameOwnerElement.cpp

  Log Message:
  -----------
  Cherry-pick 256843.2 at webkit-2022.12-embargoed (155bed739000). rdar://104648588

    HTMLFrameOwnerElement: use Document::creationURL() for self-reference check
    https://bugs.webkit.org/show_bug.cgi?id=248469

    Reviewed by Darin Adler.

    Document::url() can be changed through the History API, therefore it's not
    a reliable source to verify whether a given URL is self-referencing. Use
    creationURL instead, which is immutable.

    * LayoutTests/http/tests/security/embedded-self-reference-after-url-modified-expected.txt: Added.
    * LayoutTests/http/tests/security/embedded-self-reference-after-url-modified.html: Added.
    * Source/WebCore/html/HTMLFrameOwnerElement.cpp:
    (WebCore::HTMLFrameOwnerElement::isProhibitedSelfReference const):

    Canonical link: https://commits.webkit.org/256843.2@webkit-2022.12-embargoed

Canonical link: https://commits.webkit.org/259370@main