[Webkit-unassigned] [Bug 27639] New: XSS Auditor interferes with -[WebView stringByEvaluatingJavaScriptFromString:]

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jul 23 22:36:44 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27639

           Summary: XSS Auditor interferes with -[WebView
                    stringByEvaluatingJavaScriptFromString:]
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Keywords: XSSAuditor
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mrowe at apple.com
                CC: abarth at webkit.org


I tracked down an assertion failure in DumpRenderTree this afternoon that is
caused by the XSS auditor causing the following API invocation to fail:
[webView stringByEvaluatingJavaScriptFromString:@"0"];  With the XSS auditor
enabled, this returns the empty string rather than "0" as expected.  This was
being tripped over by DumpRenderTree on machines that had never run the layout
tests before due to the default preferences being incorrectly configured
(<http://trac.webkit.org/changeset/46304>), but it seems undesirable for the
XSS auditor to have any effect on these sorts of APIs.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list