[Webkit-unassigned] [Bug 37392] Run the SVG <img> rendering context in a unique origin as a defense in depth measure

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Apr 10 16:51:57 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=37392


Adam Barth <abarth at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #53058|review?                     |review-
               Flag|                            |




--- Comment #3 from Adam Barth <abarth at webkit.org>  2010-04-10 16:51:57 PST ---
(From update of attachment 53058)
That method on FrameLoader is very sketchy.  Can't we operate on the
SecurityOrigin directly?  That won't be overridden in any funny ways.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list