[Webkit-unassigned] [Bug 36459] Assigning to window.name in an iframe breaks link targets in containing document.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Mar 23 13:56:35 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=36459





--- Comment #4 from Adam Barth <abarth at webkit.org>  2010-03-23 13:56:35 PST ---
Window names existing a global namespace.  Trying to stop an iframe from
screwing around with name-targeted navigation would be tricky.

We should match Firefox as closely has possible here.  Name targeted
navigations are really fragile.  We should test the priorities between the
following three names for a frame:

1) The iframe's "name" attribute.
2) Assigning to "window.name".
3) Declaring a global "name" variable.
4) Declaring a global "name" function.

We should also test both the same-origin and the cross-origin scenario.

My guess is that the bug is that we're making "var name" assign to window.name
instead of shadowing the DOM property with the JavaScript variable.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list