Perform the JavaScript navigation check on a complete URL
authorAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Fri, 29 Jul 2011 14:40:54 +0000 (11:40 -0300)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Fri, 29 Jul 2011 14:40:54 +0000 (11:40 -0300)
commit5196373e3402f2503c71fede0ae0a62d493c96dd
treec7a1507b901c781e77b4750d15f02a2fcc038770
parent2690506060e818facf038f597d52d515c53a7713
Perform the JavaScript navigation check on a complete URL
https://bugs.webkit.org/show_bug.cgi?id=65038

Patch by Sergey Glazunov <serg.glazunov@gmail.com> on 2011-07-22
Reviewed by Adam Barth.

Source/WebCore:

Test: http/tests/security/xss-DENIED-document-baseURI-javascript.html

* page/DOMWindow.cpp:
(WebCore::DOMWindow::setLocation):
(WebCore::DOMWindow::createWindow):
(WebCore::DOMWindow::open):

LayoutTests:

* http/tests/security/xss-DENIED-document-baseURI-javascript-expected.txt: Added.
* http/tests/security/xss-DENIED-document-baseURI-javascript.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@91611 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Conflicts:

Source/WebCore/page/DOMWindow.cpp
LayoutTests/ChangeLog
LayoutTests/http/tests/security/xss-DENIED-document-baseURI-javascript-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/xss-DENIED-document-baseURI-javascript.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/page/DOMWindow.cpp