[Webkit-unassigned] [Bug 39750] Allow peer frame navigation for file URLs when allowFileAccessFromFileURLs is false

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu May 27 15:45:52 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=39750


Adam Barth <abarth at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #57125|review?, commit-queue?      |review-
               Flag|                            |




--- Comment #5 from Adam Barth <abarth at webkit.org>  2010-05-27 15:45:52 PST ---
(From update of attachment 57125)
This isn't quite accurate.  This will allow sibling navigation.  We only want to allow descendants.  What you want to do is move this check into canAccessAncestor  after http://trac.webkit.org/browser/trunk/WebCore/loader/FrameLoader.cpp#L2149.  Basically, you want to fake that the call to |canAccess| there succeeds if both security origins are local.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list