Source/WebCore: Never override the policy URL on form submissions.
authorJochen Eisinger <jochen@chromium.org>
Mon, 1 Aug 2011 21:18:49 +0000 (21:18 +0000)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Fri, 5 Aug 2011 20:37:30 +0000 (17:37 -0300)
commitc1022df9dc8bced1b5d9a40afc9ed5257e9bbc0e
tree797b992eab087e74942ed59a7269c8f48a5a19f4
parent18d52e6744ddb011aa537602367d465069d2e8b7
Source/WebCore: Never override the policy URL on form submissions.
https://bugs.webkit.org/show_bug.cgi?id=61809

Reviewed by Adam Barth.

Tests: http/tests/security/cookies/third-party-cookie-blocking-main-frame.html
       http/tests/security/cookies/third-party-cookie-blocking-user-action.html
       http/tests/security/cookies/third-party-cookie-blocking.html

* loader/FrameLoader.cpp:
(WebCore::FrameLoader::loadURL):
(WebCore::FrameLoader::addExtraFieldsToSubresourceRequest):
(WebCore::FrameLoader::addExtraFieldsToMainResourceRequest):
(WebCore::FrameLoader::addExtraFieldsToRequest):
(WebCore::FrameLoader::loadPostRequest):
(WebCore::FrameLoader::loadDifferentDocumentItem):
* loader/FrameLoader.h:

LayoutTests: Require explicit user action to override the policy URL on form submissions.
https://bugs.webkit.org/show_bug.cgi?id=61809

Reviewed by Adam Barth.

* http/tests/loading/redirect-methods-expected.txt:
* http/tests/security/cookies/resources/set-a-cookie.php: Added.
* http/tests/security/cookies/third-party-cookie-blocking-expected.txt: Added.
* http/tests/security/cookies/third-party-cookie-blocking-main-frame-expected.txt: Added.
* http/tests/security/cookies/third-party-cookie-blocking-main-frame.html: Added.
* http/tests/security/cookies/third-party-cookie-blocking-user-action-expected.txt: Added.
* http/tests/security/cookies/third-party-cookie-blocking-user-action.html: Added.
* http/tests/security/cookies/third-party-cookie-blocking.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@92142 268f45cc-cd09-0410-ab3c-d52691b4dbfc
12 files changed:
LayoutTests/ChangeLog
LayoutTests/http/tests/loading/redirect-methods-expected.txt
LayoutTests/http/tests/security/cookies/resources/set-a-cookie.php [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking-main-frame-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking-main-frame.html [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking-user-action-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking-user-action.html [new file with mode: 0644]
LayoutTests/http/tests/security/cookies/third-party-cookie-blocking.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/loader/FrameLoader.cpp
Source/WebCore/loader/FrameLoader.h