[Webkit-unassigned] [Bug 32860] REGRESSION(Safari 4): Relative path is resolved incorrectly when JS code is called via a simulated event

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Dec 29 10:01:26 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=32860





--- Comment #5 from Charles Reis <creis at chromium.org>  2009-12-29 10:01:25 PST ---
(In reply to comment #4)
> This might be related to a long-standing bug that JSC doesn't restart the
> dynamic scope when you call dispatchEvent.  Charlie recently rediscovered this
> issue when looking at sharing code between V8 and JSC.

That's right.  I was basically testing Alexey's attached test case with
dispatchEvent instead of click(), but it's the same issue discussed here.

It appears that Chrome (i.e., V8), Firefox, and IE restart the dynamic scope
(which V8 calls the "entered context") after a dispatchEvent occurs, but Safari
4 doesn't.  This ends up being visible to the user in a few ways: how relative
URLs are resolved, what the HTTP referer header is set to, and whether an
action is considered a user gesture (perhaps among other things).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list