Problem seen with Flash plugin requests specifically
From IRC: Omni is using mainDocumentURL to block specific requests, to "do things like add ".swf" to your blacklist and have flash just not-load, and then click to load it if you want it."
Created attachment 11676 [details] Omni's Fix for this bug ap: here's the change Omni made, to ensure that requests that originate from WebPlugins have their MainDocumentURL set. We use this to decide whether or not to block content.
Something that surprises me is that this code doesn't seem to be reachable from Netscape-style plugins - the modified method is a WebPluginController API, and the only place in WebKit where it is called is from an SPI of same class ("For compatibility only").
Comment on attachment 11676 [details] Omni's Fix for this bug This may not cover all the right places to get plugins to set a main document URL, but seems like an improvement in any case. r=me
I'll land this, but would like to clarify something over IRC first.
Looks like my concerns may be not entirely nonsense - reassigning back to Rachael to look into them some more. Besides this patch being for another issue, I'm not sure if it's even correct to set mainDocumentURL rather than referer here.
Comment on attachment 11676 [details] Omni's Fix for this bug Clearing mjs r+ on Attachment 11676 [details] per Comment #6.
<rdar://problem/7338359>
Reverse duping to https://bugs.webkit.org/show_bug.cgi?id=26391 *** This bug has been marked as a duplicate of bug 26391 ***