[Webkit-unassigned] [Bug 21288] Implement HTML5's sandbox attribute for iframes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Nov 18 11:57:25 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=21288





--- Comment #45 from Darin Adler <darin at apple.com>  2009-11-18 11:57:19 PST ---
(In reply to comment #44)
> I haven't tested this, but I suspect it would be as simple as a
> sandbox check in DOMWindow::localStorage()/sessionStorage().

Sure, makes sense.

So you changed the equal function for some reason relating to storage and
database. What was the design you were trying to implement? What did you expect
storage-wise and database-wise? Did you expect a separate store that only lived
as long as the sandboxed frame? If so, then where is the code to delete the
storage and database when the frame goes away? Did you expect to prohibit
storage and database access in the sandboxed frame?

We need to design before we can nail down the implementation.

And it would be OK to land this with an interim design even if we change it
later.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list