[Webkit-unassigned] [Bug 38151] New: drop support for sessionStorage in sandbox iframes
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Apr 26 17:20:37 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=38151
Summary: drop support for sessionStorage in sandbox iframes
Product: WebKit
Version: 528+ (Nightly build)
Platform: PC
OS/Version: Mac OS X 10.5
Status: UNCONFIRMED
Severity: Normal
Priority: P2
Component: Frames
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: evn at google.com
From: https://bugs.webkit.org/show_bug.cgi?id=32369#c3
I think sessionStorage should be disabled in sandboxed iframes.
sandboxed.html: <script>sessionStorage.x='busted';</script>
sandboxer.html:
<script>setInterval(function(){document.title=sessionStorage.x},500);</script><iframe
sandbox="allow-scripts" src="sandboxed.html"></iframe>
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list