[Webkit-unassigned] [Bug 20988] REGRESSION (r31890?): Inspector's Elements panel doesn't descend into <iframe>s with a different security origin from the main frame

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 29 11:35:05 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=20988





------- Comment #9 from abarth at webkit.org  2009-04-29 11:35 PDT -------
(In reply to comment #8)
> Maybe Sam or Adam has some ideas about how to safely access subframes from
> different security origins without causing security problems.

It's been a while since I looked at this code, but it sounds like we're using
the wrong security origin for the access check.  Meaning, we're using the
page's security origin instead of the inspector's origin.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list