RESOLVED WORKSFORME 13579
window.location.assign(url) ignores "javascript:" type addresses 
https://bugs.webkit.org/show_bug.cgi?id=13579
Summary window.location.assign(url) ignores "javascript:" type addresses
Feng Qian
Reported 2007-05-03 17:12:42 PDT
window.location = "javascript:alert('hello world');"; displays the alert window. window.location.assign("javascript:alert('hello world')") does not. It looks like a systematical pattern in kjs_window.cpp that ignores requested urls that start with 'javascript:'. Other browsers support window.location.assign('javascript:...');
Attachments
Add attachment proposed patch, testcase, etc.
Mark Rowe (bdash)
Comment 1 2007-05-03 17:33:28 PDT
This works for me in the latest nightly build. <script type="text/javascript"> window.location.assign('javascript:alert("Hi")'); </script>
Feng Qian
Comment 2 2007-05-03 17:35:53 PDT
After re-thinking, it might have its purpose. This can restrict some type of XSS attack.
Feng Qian
Comment 3 2007-05-03 17:44:20 PDT
Updated my tree, and it works fine. (In reply to comment #1) > This works for me in the latest nightly build. > > <script type="text/javascript"> > window.location.assign('javascript:alert("Hi")'); > </script> >
Note You need to log in before you can comment on or make changes to this bug.