[webkit-reviews] review granted: [Bug 171327] Add attribute allow-top-navigation-by-user-activation to iframe sandbox : [Attachment 315246] Patch

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jul 17 11:48:21 PDT 2017


Chris Dumez <cdumez at apple.com> has granted Frédéric Wang (:fredw)
<fred.wang at free.fr>'s request for review:
Bug 171327: Add attribute allow-top-navigation-by-user-activation to iframe
sandbox
https://bugs.webkit.org/show_bug.cgi?id=171327

Attachment 315246: Patch

https://bugs.webkit.org/attachment.cgi?id=315246&action=review




--- Comment #8 from Chris Dumez <cdumez at apple.com> ---
Comment on attachment 315246
  --> https://bugs.webkit.org/attachment.cgi?id=315246
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=315246&action=review

r=me

> Source/WebCore/dom/Document.cpp:3104
> +    // i. A frame can navigate its top ancestor when its
'allow-top-navigation' flag is set (sometimes known as 'frame-busting')

WebKit comments should end with a period.

> LayoutTests/ChangeLog:19
> +	   *
http/tests/security/frameNavigation/sandbox-ALLOWED-top-navigation-with-user-ge
sture-2.html: Added.

Please add a test for when such navigation is NOT allowed.


More information about the webkit-reviews mailing list