[Webkit-unassigned] [Bug 73083] Fix the Frame Leak Attack

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 2 11:51:53 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=73083





--- Comment #28 from Thomas Sepez <tsepez at chromium.org>  2012-04-02 11:51:53 PST ---
Ok, so the logic would be canAcessAllAncestors()?

> A can initiate a navigation on C.  In general, a frame can navigate any of it's descendants.

Also, I've noticed the firedictionary link is blocked (despite layout tests for this situation), so theres something that needs to be run to ground .

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list