[Webkit-unassigned] [Bug 32326] New: Refactor some security code out of V8 bindings

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=32326

           Summary: Refactor some security code out of V8 bindings
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: creis at chromium.org
                CC: abarth at webkit.org


As a first step toward sharing code between the V8 and JSC bindings, we should
try to refactor some of V8's code for enforcing the Same Origin Policy.  I
suggest moving canAccessFrame and checkNodeSecurity from V8Proxy to a new
BindingsSecurity class that can be used by multiple bindings.  Since JSC passes
around execution state explicitly and V8 does not, the BindingsSecurity
interface should be able to take in execution state as an argument.

There has been some discussion about starting to share bindings code in this
thread:
http://lists.macosforge.org/pipermail/webkit-dev/2009-May/007935.html

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.