[Webkit-unassigned] [Bug 107389] <script crossorigin> not handled correctly when server doesn't send the right headers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=107389





--- Comment #3 from Pablo Flouret <pablof at motorola.com>  2013-01-23 15:12:52 PST ---
I wasn't aware that when the parser triggers the script request it follows a different code path that doesn't end up in ScriptElement::notifyFinished() so the check is never done.

I'm not super familiar with how the parser does things, is HTMLScriptRunner::executePendingScriptAndDispatchEvent() the right place to do the CORS check (or HTMLScriptRunner::runScript(), or both)?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.