[Webkit-unassigned] [Bug 64403] New: Move RenderTextControl::indexForVisiblePosition to HTMLTextFormControlElement

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jul 12 15:28:59 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=64403

           Summary: Move RenderTextControl::indexForVisiblePosition to
                    HTMLTextFormControlElement
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rniwa at webkit.org
                CC: darin at apple.com, ap at webkit.org,
                    simon.fraser at apple.com, dglazkov at chromium.org,
                    inferno at chromium.org


RenderTextControl has two versions of indexForVisiblePosition, one inherited from RenderObject and another one that takes InnerTextElement in addition to VisiblePosition and used primarily in HTMLTextFormControlElement. 

We've had quite few security vulnerabilities due to this function being called at undesirable timing in RenderTextControl.  Since only call sites of this function outside of HTMLTextFormControlElement is in accessibility, we should move this function to HTMLTextFormControlElement.

This will prevent people from inadvertently introducing a similar security vulnerabilities.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list