[Webkit-unassigned] [Bug 33539] [GTK] handle media redirections

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jan 19 12:33:18 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=33539


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #46923|review?                     |review-
               Flag|                            |




--- Comment #8 from Oliver Hunt <oliver at apple.com>  2010-01-19 12:33:18 PST ---
(From update of attachment 46923)
Ah right, i see what you're doing, you're doing an origin check of the document
versus the media.  That's not what we want to do.  What we want to do is make
any redirect in the media that goes to a different origin from the current
origin be forbidden

Eg. if i have

http://example.com/foo.mov and that media file contains a redirect to
http://example.com/foo2.mov that's okay, if i instead it redirects to
http://evil.com/foo.mov then the media should be blocked.  This has nothing to
do with the containing document.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list