[Webkit-unassigned] [Bug 127937] WebGLLoadPolicy should be queried for the top document

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 30 14:58:23 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=127937


Tim Horton <thorton at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #222723|review?                     |review+
               Flag|                            |




--- Comment #3 from Tim Horton <thorton at apple.com>  2014-01-30 14:55:46 PST ---
(From update of attachment 222723)
View in context: https://bugs.webkit.org/attachment.cgi?id=222723&action=review

> Source/WebCore/html/HTMLCanvasElement.cpp:-229
> -                Page* page = document().page();

I asked if this was right because it means that trusting the main document's domain would let subdocuments from origins the user doesn't trust run, and he noted that plugins do the same thing, so I think this is fine (but maybe we should revisit this?).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list