[Webkit-unassigned] [Bug 10313] xsl:import and document() don't work in stylesheets loaded via XMLHttpRequest

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue May 25 00:46:43 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=10313





--- Comment #35 from Adam Barth <abarth at webkit.org>  2010-05-25 00:46:40 PST ---
> > WebCore/dom/Document.cpp:1285
> >  +              ScriptExecutionContext::setSecurityOrigin(doc->securityOrigin());
> > I don't understand why we do this.
> 
> If we do not copy the securityOrigin from the originFrame's document then it will be empty and that means calls to SecurityOrigin::canRequest(const KURL&) will return false.

I can't be right to unconditionally copy the security origin (and the cookie origin) to the new document.  The document should be able to make its own origin from its own URL.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list