[Webkit-unassigned] [Bug 16523] Calling window.open("", "foo") allows arbitrary scripting by any domain

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 21 08:48:41 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=16523





------- Comment #10 from ddkilzer at webkit.org  2007-12-21 08:48 PDT -------
(In reply to comment #3)
> Is there some mechanism for reporting these issues privately?  Mozilla has a
> check box that hides security sensitive bugs from the public...

Note that the security box must be checked on the create-a-new-bug page
(assuming it's there), otherwise email is sent to the webkit-unassigned list
with all the details when the bug is created.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list