[Webkit-unassigned] [Bug 16523] Calling window.open("", "foo") allows arbitrary scripting by any domain
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Dec 21 08:48:41 PST 2007
http://bugs.webkit.org/show_bug.cgi?id=16523
------- Comment #10 from ddkilzer at webkit.org 2007-12-21 08:48 PDT -------
(In reply to comment #3)
> Is there some mechanism for reporting these issues privately? Mozilla has a
> check box that hides security sensitive bugs from the public...
Note that the security box must be checked on the create-a-new-bug page
(assuming it's there), otherwise email is sent to the webkit-unassigned list
with all the details when the bug is created.
--
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list