115494 2013-05-01 16:12:06 -0700 <object data="<some data URL>"> MIME types aren't case-insensitive 2013-05-01 17:14:47 -0700 1 1 1 Unclassified WebKit Plug-ins 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 thorton thorton ap darin simon.fraser oldest_to_newest 883576 0 thorton 2013-05-01 16:12:06 -0700 My understanding is that they should be. This also appears to be the only path through <embed> or <object> that doesn't call .lower() on the incoming MIME type. See attached test case. 883577 1 200250 thorton 2013-05-01 16:12:30 -0700 Created attachment 200250 repro 883590 2 200253 thorton 2013-05-01 16:31:03 -0700 Created attachment 200253 patch 883591 3 200254 thorton 2013-05-01 16:31:53 -0700 Created attachment 200254 with test case this time 883610 4 thorton 2013-05-01 17:14:47 -0700 http://trac.webkit.org/changeset/149466 200250 2013-05-01 16:12:30 -0700 2013-05-01 16:12:30 -0700 repro case-sensitive-object.html text/html 462 thorton U2hvdWxkIHNlZSB0d28gcmVkIGRvdHMgaWYgb2JqZWN0LXRhZyBkYXRhPWRhdGFVUkwgTUlNRSB0 eXBlcyBhcmUgY2FzZS1pbnNlbnNpdGl2ZS4KCjxvYmplY3Qgd2lkdGg9IjIwMCIgaGVpZ2h0PSIy MDAiIGRhdGE9ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFB QVVBQUFBRkNBWUFBQUNOYnlibEFBQUFIRWxFUVZRSTEyUDQvLzgvdzM4R0lBWERJQktFMERIeGds ak5CQUFPOVRYTDBZNE9Id0FBQUFCSlJVNUVya0pnZ2c9PSI+PC9vYmplY3Q+CjxvYmplY3Qgd2lk dGg9IjIwMCIgaGVpZ2h0PSIyMDAiIGRhdGE9ImRhdGE6aW1hZ2UvUE5HO2Jhc2U2NCxpVkJPUncw S0dnb0FBQUFOU1VoRVVnQUFBQVVBQUFBRkNBWUFBQUNOYnlibEFBQUFIRWxFUVZRSTEyUDQvLzgv dzM4R0lBWERJQktFMERIeGdsak5CQUFPOVRYTDBZNE9Id0FBQUFCSlJVNUVya0pnZ2c9PSI+PC9v YmplY3Q+ 200253 2013-05-01 16:31:03 -0700 2013-05-01 16:31:53 -0700 patch objectmime.diff text/plain 2510 thorton ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCBmNTg5ZTczLi4wMDY5ZTI4IDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMTMtMDUt MDEgIFRpbSBIb3J0b24gIDx0aW1vdGh5X2hvcnRvbkBhcHBsZS5jb20+CisKKyAgICAgICAgPG9i amVjdCBkYXRhPSI8c29tZSBkYXRhIFVSTD4iPiBNSU1FIHR5cGVzIGFyZW4ndCBjYXNlLWluc2Vu c2l0aXZlCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0x MTU0OTQKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBB ZGQgYSB0ZXN0Y2FzZSB0aGF0IGVuc3VyZXMgdGhhdCBpTWFHZS9QTkcgPT0gaW1hZ2UvcG5nIHdo ZW4gaXQgY29tZXMgdG8KKyAgICAgICAgdGhlIE1JTUUgdHlwZSBzcGVjaWZpZWQgaW4gYSBkYXRh IFVSTCBwcm92aWRlZCB0byA8b2JqZWN0PiB2aWEgaXRzCisgICAgICAgICdkYXRhJyBhdHRyaWJ1 dGUuCisKKyAgICAgICAgKiBmYXN0L2ltYWdlcy9vYmplY3QtZGF0YS11cmwtY2FzZS1pbnNlbnNp dGl2aXR5LWV4cGVjdGVkLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGZhc3QvaW1hZ2VzL29iamVj dC1kYXRhLXVybC1jYXNlLWluc2Vuc2l0aXZpdHkuaHRtbDogQWRkZWQuCisKIDIwMTMtMDQtMzAg IERhdmlkIEh5YXR0ICA8aHlhdHRAYXBwbGUuY29tPgogCiAgICAgICAgIDxidXR0b24+IGlnbm9y ZXMgbWFyZ2luLWJvdHRvbS4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBi L1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRleCBjMDI3NTBjLi5iZDM4ZTFjIDEwMDY0NAot LS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdl TG9nCkBAIC0xLDUgKzEsMjQgQEAKIDIwMTMtMDUtMDEgIFRpbSBIb3J0b24gIDx0aW1vdGh5X2hv cnRvbkBhcHBsZS5jb20+CiAKKyAgICAgICAgPG9iamVjdCBkYXRhPSI8c29tZSBkYXRhIFVSTD4i PiBNSU1FIHR5cGVzIGFyZW4ndCBjYXNlLWluc2Vuc2l0aXZlCisgICAgICAgIGh0dHBzOi8vYnVn cy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMTU0OTQKKworICAgICAgICBSZXZpZXdlZCBi eSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUZXN0OiBmYXN0L2ltYWdlcy9vYmplY3QtZGF0 YS11cmwtY2FzZS1pbnNlbnNpdGl2aXR5Lmh0bWwKKworICAgICAgICBNSU1FIHR5cGVzIGFyZSBk ZWZpbmVkIHRvIGJlIGNhc2UtaW5zZW5zaXRpdmUsIGJ1dCBtYW55IHBsYWNlcyBpbiBXZWJDb3Jl CisgICAgICAgIG9ubHkgY29tcGFyZSB0aGVtIGFnYWluc3QgbG93ZXItY2FzZSBzdHJpbmdzLiBN b3N0IGVudHJ5IHBvaW50cyBmb3IgTUlNRQorICAgICAgICB0eXBlcyBsb3dlci1jYXNlIHRoZW0s IGJ1dCBtaW1lVHlwZUZyb21EYXRhVVJMIGRvZXNuJ3QsIGNhdXNpbmcsIGZvciBleGFtcGxlLAor ICAgICAgICBkYXRhOmltYWdlL3BuZzsuLi4gdG8gd29yaywgYnV0IGRhdGE6aU1hR2UvUE5HOy4u LiB0byBmYWlsLgorCisgICAgICAgIFRvIGZpeCB0aGlzLCBsb3dlci1jYXNlIHRoZSBzdHJpbmcg cmV0dXJuZWQgZnJvbSBtaW1lVHlwZUZyb21EYXRhVVJMLgorCisgICAgICAgICogcGxhdGZvcm0v S1VSTC5jcHA6CisgICAgICAgIChXZWJDb3JlOjptaW1lVHlwZUZyb21EYXRhVVJMKToKKworMjAx My0wNS0wMSAgVGltIEhvcnRvbiAgPHRpbW90aHlfaG9ydG9uQGFwcGxlLmNvbT4KKwogICAgICAg ICBNb3ZlIGtub3dsZWRnZSBvZiBQREYvUG9zdFNjcmlwdCBNSU1FIHR5cGVzIGludG8gTUlNRVR5 cGVSZWdpc3RyeQogICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/ aWQ9MTE1NDg3CiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL0tVUkwuY3Bw IGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vS1VSTC5jcHAKaW5kZXggMTI1OTE3My4uYTc0N2Yz OSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vS1VSTC5jcHAKKysrIGIvU291 cmNlL1dlYkNvcmUvcGxhdGZvcm0vS1VSTC5jcHAKQEAgLTE4ODksNyArMTg4OSw3IEBAIFN0cmlu ZyBtaW1lVHlwZUZyb21EYXRhVVJMKGNvbnN0IFN0cmluZyYgdXJsKQogICAgICAgICBpbmRleCA9 IHVybC5maW5kKCcsJyk7CiAgICAgaWYgKGluZGV4ICE9IG5vdEZvdW5kKSB7CiAgICAgICAgIGlm IChpbmRleCA+IDUpCi0gICAgICAgICAgICByZXR1cm4gdXJsLnN1YnN0cmluZyg1LCBpbmRleCAt IDUpOworICAgICAgICAgICAgcmV0dXJuIHVybC5zdWJzdHJpbmcoNSwgaW5kZXggLSA1KS5sb3dl cigpOwogICAgICAgICByZXR1cm4gInRleHQvcGxhaW4iOyAvLyBEYXRhIFVSTHMgd2l0aCBubyBN SU1FIHR5cGUgYXJlIGNvbnNpZGVyZWQgdGV4dC9wbGFpbi4KICAgICB9CiAgICAgcmV0dXJuICIi Owo= 200254 2013-05-01 16:31:53 -0700 2013-05-01 17:06:47 -0700 with test case this time objectmime.diff text/plain 4017 thorton ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCBmNTg5ZTczLi4wMDY5ZTI4IDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VM b2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMTMtMDUt MDEgIFRpbSBIb3J0b24gIDx0aW1vdGh5X2hvcnRvbkBhcHBsZS5jb20+CisKKyAgICAgICAgPG9i amVjdCBkYXRhPSI8c29tZSBkYXRhIFVSTD4iPiBNSU1FIHR5cGVzIGFyZW4ndCBjYXNlLWluc2Vu c2l0aXZlCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0x MTU0OTQKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBB ZGQgYSB0ZXN0Y2FzZSB0aGF0IGVuc3VyZXMgdGhhdCBpTWFHZS9QTkcgPT0gaW1hZ2UvcG5nIHdo ZW4gaXQgY29tZXMgdG8KKyAgICAgICAgdGhlIE1JTUUgdHlwZSBzcGVjaWZpZWQgaW4gYSBkYXRh IFVSTCBwcm92aWRlZCB0byA8b2JqZWN0PiB2aWEgaXRzCisgICAgICAgICdkYXRhJyBhdHRyaWJ1 dGUuCisKKyAgICAgICAgKiBmYXN0L2ltYWdlcy9vYmplY3QtZGF0YS11cmwtY2FzZS1pbnNlbnNp dGl2aXR5LWV4cGVjdGVkLmh0bWw6IEFkZGVkLgorICAgICAgICAqIGZhc3QvaW1hZ2VzL29iamVj dC1kYXRhLXVybC1jYXNlLWluc2Vuc2l0aXZpdHkuaHRtbDogQWRkZWQuCisKIDIwMTMtMDQtMzAg IERhdmlkIEh5YXR0ICA8aHlhdHRAYXBwbGUuY29tPgogCiAgICAgICAgIDxidXR0b24+IGlnbm9y ZXMgbWFyZ2luLWJvdHRvbS4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL29i amVjdC1kYXRhLXVybC1jYXNlLWluc2Vuc2l0aXZpdHktZXhwZWN0ZWQuaHRtbCBiL0xheW91dFRl c3RzL2Zhc3QvaW1hZ2VzL29iamVjdC1kYXRhLXVybC1jYXNlLWluc2Vuc2l0aXZpdHktZXhwZWN0 ZWQuaHRtbApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi45OTYxMjkyCi0tLSAv ZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZmFzdC9pbWFnZXMvb2JqZWN0LWRhdGEtdXJsLWNh c2UtaW5zZW5zaXRpdml0eS1leHBlY3RlZC5odG1sCkBAIC0wLDAgKzEsNCBAQAorU2hvdWxkIHNl ZSB0d28gZ3JlZW4gc3F1YXJlcyBpZiBvYmplY3QtdGFnIGRhdGE9ZGF0YVVSTCBNSU1FIHR5cGVz IGFyZSBjYXNlLWluc2Vuc2l0aXZlLjxici8+CisKKzxpbWcgd2lkdGg9IjIwMCIgaGVpZ2h0PSIy MDAiIHNyYz0iZGF0YTppbWFnZS9wbmc7YmFzZTY0LGlWQk9SdzBLR2dvQUFBQU5TVWhFVWdBQUFB RUFBQUFCQ0FJQUFBQ1FkMVBlQUFBQURFbEVRVlFJSFdOZytNOEFBQUlDQVFEcExPclRBQUFBQUVs RlRrU3VRbUNDIj48L29iamVjdD4KKzxpbWcgd2lkdGg9IjIwMCIgaGVpZ2h0PSIyMDAiIHNyYz0i ZGF0YTppbWFnZS9wbmc7YmFzZTY0LGlWQk9SdzBLR2dvQUFBQU5TVWhFVWdBQUFBRUFBQUFCQ0FJ QUFBQ1FkMVBlQUFBQURFbEVRVlFJSFdOZytNOEFBQUlDQVFEcExPclRBQUFBQUVsRlRrU3VRbUND Ij48L29iamVjdD4KXCBObyBuZXdsaW5lIGF0IGVuZCBvZiBmaWxlCmRpZmYgLS1naXQgYS9MYXlv dXRUZXN0cy9mYXN0L2ltYWdlcy9vYmplY3QtZGF0YS11cmwtY2FzZS1pbnNlbnNpdGl2aXR5Lmh0 bWwgYi9MYXlvdXRUZXN0cy9mYXN0L2ltYWdlcy9vYmplY3QtZGF0YS11cmwtY2FzZS1pbnNlbnNp dGl2aXR5Lmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uZjdiMjI3ZQot LS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2Zhc3QvaW1hZ2VzL29iamVjdC1kYXRhLXVy bC1jYXNlLWluc2Vuc2l0aXZpdHkuaHRtbApAQCAtMCwwICsxLDQgQEAKK1Nob3VsZCBzZWUgdHdv IGdyZWVuIHNxdWFyZXMgaWYgb2JqZWN0LXRhZyBkYXRhPWRhdGFVUkwgTUlNRSB0eXBlcyBhcmUg Y2FzZS1pbnNlbnNpdGl2ZS48YnIvPgorCis8b2JqZWN0IHdpZHRoPSIyMDAiIGhlaWdodD0iMjAw IiBkYXRhPSJkYXRhOmltYWdlL3BuZztiYXNlNjQsaVZCT1J3MEtHZ29BQUFBTlNVaEVVZ0FBQUFF QUFBQUJDQUlBQUFDUWQxUGVBQUFBREVsRVFWUUlIV05nK004QUFBSUNBUURwTE9yVEFBQUFBRWxG VGtTdVFtQ0MiPjwvb2JqZWN0PgorPG9iamVjdCB3aWR0aD0iMjAwIiBoZWlnaHQ9IjIwMCIgZGF0 YT0iZGF0YTppTWFHZS9QTkc7YmFzZTY0LGlWQk9SdzBLR2dvQUFBQU5TVWhFVWdBQUFBRUFBQUFC Q0FJQUFBQ1FkMVBlQUFBQURFbEVRVlFJSFdOZytNOEFBQUlDQVFEcExPclRBQUFBQUVsRlRrU3VR bUNDIj48L29iamVjdD4KXCBObyBuZXdsaW5lIGF0IGVuZCBvZiBmaWxlCmRpZmYgLS1naXQgYS9T b3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXgg YzAyNzUwYy4uYmQzOGUxYyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisr KyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDI0IEBACiAyMDEzLTA1LTAx ICBUaW0gSG9ydG9uICA8dGltb3RoeV9ob3J0b25AYXBwbGUuY29tPgogCisgICAgICAgIDxvYmpl Y3QgZGF0YT0iPHNvbWUgZGF0YSBVUkw+Ij4gTUlNRSB0eXBlcyBhcmVuJ3QgY2FzZS1pbnNlbnNp dGl2ZQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTE1 NDk0CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVGVz dDogZmFzdC9pbWFnZXMvb2JqZWN0LWRhdGEtdXJsLWNhc2UtaW5zZW5zaXRpdml0eS5odG1sCisK KyAgICAgICAgTUlNRSB0eXBlcyBhcmUgZGVmaW5lZCB0byBiZSBjYXNlLWluc2Vuc2l0aXZlLCBi dXQgbWFueSBwbGFjZXMgaW4gV2ViQ29yZQorICAgICAgICBvbmx5IGNvbXBhcmUgdGhlbSBhZ2Fp bnN0IGxvd2VyLWNhc2Ugc3RyaW5ncy4gTW9zdCBlbnRyeSBwb2ludHMgZm9yIE1JTUUKKyAgICAg ICAgdHlwZXMgbG93ZXItY2FzZSB0aGVtLCBidXQgbWltZVR5cGVGcm9tRGF0YVVSTCBkb2Vzbid0 LCBjYXVzaW5nLCBmb3IgZXhhbXBsZSwKKyAgICAgICAgZGF0YTppbWFnZS9wbmc7Li4uIHRvIHdv cmssIGJ1dCBkYXRhOmlNYUdlL1BORzsuLi4gdG8gZmFpbC4KKworICAgICAgICBUbyBmaXggdGhp cywgbG93ZXItY2FzZSB0aGUgc3RyaW5nIHJldHVybmVkIGZyb20gbWltZVR5cGVGcm9tRGF0YVVS TC4KKworICAgICAgICAqIHBsYXRmb3JtL0tVUkwuY3BwOgorICAgICAgICAoV2ViQ29yZTo6bWlt ZVR5cGVGcm9tRGF0YVVSTCk6CisKKzIwMTMtMDUtMDEgIFRpbSBIb3J0b24gIDx0aW1vdGh5X2hv cnRvbkBhcHBsZS5jb20+CisKICAgICAgICAgTW92ZSBrbm93bGVkZ2Ugb2YgUERGL1Bvc3RTY3Jp cHQgTUlNRSB0eXBlcyBpbnRvIE1JTUVUeXBlUmVnaXN0cnkKICAgICAgICAgaHR0cHM6Ly9idWdz LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTExNTQ4NwogCmRpZmYgLS1naXQgYS9Tb3VyY2Uv V2ViQ29yZS9wbGF0Zm9ybS9LVVJMLmNwcCBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL0tVUkwu Y3BwCmluZGV4IDEyNTkxNzMuLmE3NDdmMzkgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3Bs YXRmb3JtL0tVUkwuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL0tVUkwuY3BwCkBA IC0xODg5LDcgKzE4ODksNyBAQCBTdHJpbmcgbWltZVR5cGVGcm9tRGF0YVVSTChjb25zdCBTdHJp bmcmIHVybCkKICAgICAgICAgaW5kZXggPSB1cmwuZmluZCgnLCcpOwogICAgIGlmIChpbmRleCAh PSBub3RGb3VuZCkgewogICAgICAgICBpZiAoaW5kZXggPiA1KQotICAgICAgICAgICAgcmV0dXJu IHVybC5zdWJzdHJpbmcoNSwgaW5kZXggLSA1KTsKKyAgICAgICAgICAgIHJldHVybiB1cmwuc3Vi c3RyaW5nKDUsIGluZGV4IC0gNSkubG93ZXIoKTsKICAgICAgICAgcmV0dXJuICJ0ZXh0L3BsYWlu IjsgLy8gRGF0YSBVUkxzIHdpdGggbm8gTUlNRSB0eXBlIGFyZSBjb25zaWRlcmVkIHRleHQvcGxh aW4uCiAgICAgfQogICAgIHJldHVybiAiIjsK