[Webkit-unassigned] [Bug 21288] Implement HTML5's sandbox attribute for iframes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 30 13:33:01 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=21288





--- Comment #59 from Darin Adler <darin at apple.com>  2009-11-30 13:32:59 PST ---
(In reply to comment #58)
> Default SecurityOrigin::m_sandboxFlags = SandboxAll
> ---------------------------------------------------
> 
> This modification fails for documents created without a frame.  The
> test case http/tests/security/cookies/create-document.html is a
> typical example of something that breaks.

So the correct sandbox flags is "all" in a case like this? Can that really be
right? Or should the sandbox flags somehow be inherited from the frame that's
doing the creating?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list