[Webkit-unassigned] [Bug 21288] Implement HTML5's sandbox attribute for iframes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Dec 10 08:21:25 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=21288





--- Comment #72 from Patrik Persson <patrik.j.persson at ericsson.com>  2009-12-10 08:21:23 PST ---
Created an attachment (id=44618)
 --> (https://bugs.webkit.org/attachment.cgi?id=44618)
Test case for "about:blank" potential issue

(In reply to comment #28)
> There's also a subtle bug for the case of
> 
> <iframe src="about:blank" sandbox></iframe>
> 
> I think that will end up sandboxing the containing frame because the
> SecurityOrigin object is shared by the two frames.

I have not been able to reproduce this bug.  I'm attaching a test case
that does what you describe, but it passes, indicating that the
containing frame is not sandboxed.

I know that your comment is based on knowledge of the code.  Perhaps
this test case works by accident, or because I misunderstood you.  Can
I ask you to file a bug report with more hints on how to reproduce it?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list