[Webkit-unassigned] [Bug 16824] Script authorization should follow lexical (not dynamic) scope

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 7 23:10:08 PST 2008


------- Comment #6 from hk9565 at gmail.com  2008-02-07 23:10 PDT -------
I don't have access to <rdar://problem/5698200> (a compatibility issue with
eBay), but it appears to be a duplicate of this bug.  The patch committed for
that issue (r30009) seems to be wrong.  That patch first checks access using
dynamic authorization, and, if that fails because document.domain was set,
retries the access check with static authorization.

The correct fix would appear to be to adopt static authorization (matching IE
and Firefox) as recommended in this bug.

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list