<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>17670</bug_id>
          
          <creation_ts>2008-03-04 11:26:46 -0800</creation_ts>
          <short_desc>Key events may improperly propagate from iframe to parent frame</short_desc>
          <delta_ts>2008-03-23 03:49:48 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Rob Brackett">rob.brackett</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>72715</commentid>
    <comment_count>0</comment_count>
    <who name="Rob Brackett">rob.brackett</who>
    <bug_when>2008-03-04 11:26:46 -0800</bug_when>
    <thetext>A keyup event (but not keydown or keypress) generated inside an iframe can be captured on the document that contains the iframe, even though this shouldn&apos;t be possible.

This can be tested by creating a page with an iframe and adding a keyup event listener to the page&apos;s document and the iframe&apos;s document. If you give an element in the containing document focus and press a key, the document&apos;s keyup listener will fire. If you give an element in the iframe focus and press a key, both the iframe document&apos;s keyup listener AND the containing window document&apos;s keyup listener will fire.

Note: I have observed this on Mac OS X 10.4 and 10.5 on both PPC and Intel. The bug does NOT appear on Windows Vista. I have not tested Windows XP.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>72737</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2008-03-04 13:25:18 -0800</bug_when>
    <thetext>Thank you for the report!

Sounds like you already have a test case - could you please attach it (or link to it), so that we don&apos;t have to duplicate the effort?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>72748</commentid>
    <comment_count>2</comment_count>
      <attachid>19531</attachid>
    <who name="Rob Brackett">rob.brackett</who>
    <bug_when>2008-03-04 15:27:07 -0800</bug_when>
    <thetext>Created attachment 19531
Iframe keyup event test case

Here&apos;s a test case for it -- there are three files, just open index.html. It demonstrates the problem with one iframe that is in the html, one that is added via javascript, and one that has designmode on.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>72790</commentid>
    <comment_count>3</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2008-03-05 01:17:57 -0800</bug_when>
    <thetext>Confirmed with r30791, nice test case.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>74845</commentid>
    <comment_count>4</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2008-03-23 00:21:58 -0700</bug_when>
    <thetext>This does effect other key events as well, although in a somewhat round about method.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>74850</commentid>
    <comment_count>5</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2008-03-23 03:49:48 -0700</bug_when>
    <thetext>Fix landed r31236</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>19531</attachid>
            <date>2008-03-04 15:27:07 -0800</date>
            <delta_ts>2008-03-04 15:27:07 -0800</delta_ts>
            <desc>Iframe keyup event test case</desc>
            <filename>iframeWebkit.tar.gz</filename>
            <type>application/x-gzip</type>
            <size>2200</size>
            <attacher name="Rob Brackett">rob.brackett</attacher>
            
              <data encoding="base64">H4sIAOnZzUcAA+1a3W7juBX2FigKG+hle81qulgbjSXLf9lJbAMzyRQbYDK72HUxWxTFgpFomw1F
aiU6jrHITS/bF+jDtK/Qp+kD9JCUbMl2EmfryRYYnolGEslzeHh+yI+U6STBEXlPrq6p9CofhlpA
x72euffN3W+39D2jig81nU6v3e0eV6Cy3+9WUO8D6VOieSpxglDlMmlNEzG9tx0OI8qfQ6HnJVr0
v/udeXVnMmKH60M5uN/t3uv/9nE3938XAgX832t3wP+tw6lwP33k/q/8/Ne/qPysUrnEAfryG/Qt
ykiVVapwteH6G1zq/Z/7iXw1Hn9d+eXyPxnHP+D67UaTT9blvwpE5EY4SESEJUndACdEVn6oKS0C
weYRR0PU7nZOdQmjnMC73z6t3R3IAh81lfL/g2T/o/nvt9v+Zv63/JbN/+egwW/Ovzwb//GrN0h5
HX31h9dvL86Q0/S8950zzzsfn6NvvxhfvkW+20LjBPOUSio4Zp735p1TqzozKeMTz1ssFu6i44pk
6o2/9m6VMF9xZ49NWWB1Qxk6o1ptoLu8jRhPhzvk+C9fvjTsjmp0wjCfDh3CHbR6GoEMgsNRrTqI
iMRICWmS7+f0ZuicCS4Jl83xMiYOzCT6behIcis9JfQUBTOcpEQO53LS/NzxQKPqQFLJyMgkwsAz
b7VqbeCZfmqDKxEuVX/xaDyjKYI/zBEO5BwzpA0V4ylx0fsZ4Wgp5khC94hyJGcEqb7RlbhFV4SJ
xZGuX1DGUEqgcoYluibLUCz4kXqIE5KmRyA+VG/zGJEbGEGKJjQhaCIS4IDeQxHMIyh30TfKxlPC
lsBT5EB1JUJwtjSlDdMnZqkwsjLtcknaVphyyqemi2xaGHixGjj0HMG9OqA8nks9PmNVB3FoNnRS
EZHv1KODbjCbQ4mDaFgsV2I8Iwcsayw60E4Z1X7qhPjIaCf+O1+Cm2hwqIXgKfjPbyv83+91ju38
/yz0wfDfX7+vHA7/+X6/jP86Fv8dhHbgvwNn/+P4z+93NvO/07b471nI4r//Df/phmiBUxQkBOav
EIUmfTADvHVDMfoLvsFpkNAYINqFRLGgCsRJASANOAqg8QjQlphPZznQgh6SpcJXCojtRJAaG26D
yAfBnFE4wLGcA74sIUuL8D4+2sR/PCS3hz4AeBz/9Vbzf6ev5v+e3+rZ+f9ZaB/89/eKwX//2k+k
wX/X/844FM77dKPJJ+vy/fDfca+M/1rHFgAegsr470Nk/2P5D6ne8jfyv9vv+zb/n4Ms/tuF/y5+
r1GSAUcwKckCFKwOUrlkpACLvCBNHRSRkGLAQIADtWbVqoI96Ad4qEY4mVJ+gnwSra52m0SnqnIC
qjUngBnZ8gThhGJ2hFKwVjMlCZ2oJndwzfyyqJbbAyEtt61vp4AgwxBAHlTkHCa1DVdI05hhkH/F
RHB9WhIE//xMlQUN5ewEKZm5lBcaG17wiTCSYmHceIIm9JaEmo2Ricw6rkoR54+5tFYm/UokIUnA
CvEtSgWjIXoRhmGhqmkEccFJ3n2xf8GMClVGU9nUXmgqL6w5CqMyr2WrrFTyW61PTcGM0OkM+mx/
nilZFTckmQC4Bl/MpdBlWpGiJoxmmuSK61EXxhUEgZG21qALtdpppuJOIWQ9Bh1UKqz0JqEYV+ut
g44nz0Nv9IHuWzGdkqSmhsNDsXChC13xFuxCOEnqDhM4dI7QZM4D5ax6w+h7A1Md08ywhq5OjqdE
vmFEPb5eXoR1ZzVOp1GoS18vx3j6DkKq7gjmNP7U+nPmZa0DiAWZqw4jkqawp8n61R1TCZFa6NZs
mDLpoDJ1GsY0qqFLOQxEzzxDlAkztUZ/F8cx4eHZjLKwrhgapVqwmmBsLGLgzorEZALJ/oX2N/od
KjU0pStf64y5zzoBIzgBD4Bxtu0eMBpcFw2/sgBx40Qb9pxM8JzJeqbwAkZAUD1TJ1DjeSdCwEGM
8Kmc5ez5wBISQYCaYW/xgEsaq+iC/0APzFKiympGRN05y7apJoaMyYsNISh1xI32i8kfE4F6XtwZ
f8UYU63WUaYuWI7yXa3ZsOYCQUDecTEGiRIE/cI+Gza7vOwUZKxhdsdqVnIgKDQH3B3z5oJzgpl6
H1wl3giAAvSUtXTNm8vB8CsuMSlXigWIzpV29RLSOEV36q8UY9vmy7//gAkLo6s7prBRcNhjYtT3
pE0puuwpQubxpggoKQvQ9nwVhuoIJHcTy5qnWWobLyKzum75UBf/SEeaFfsn8aLSHhZXyrUK0O6h
uXXdEOaPDJS8NzmU82ihJYGPxkfJcruDZA+B60jZkLcjXPYQl8fMhrCtwMmC4p3gTYBQMvvcmFs2
O04zIXP/6mGYsjAr8riwHA+RUyxythvByvBKyoRezSVMPWkSgOrO9nF4Jl9NTaUFqChrhwp7z45b
I86iqSjsvqDR/Bu8hwic/WQ+JXb2k7hv+JiJ5xKHxGQhKoXCXTHGzNqHYKWkUx5Bym/Emgo/fMXI
k4KtxJRFW152MVnHW7ndzoBbr60np/eFWknMenA6cHSwlPt5YIqBl8eWXm3fcqQDk7HGGNCAQh11
p3AQrg6k1Vk2WpCEwEIvZ6Xz8PyMXM4SddJdOhs/L3glNb9OENycexd+5gBbI6FWjmQJxepcPF0N
2EXr8/KjB47GtX67f+OwPhdXDXXRZxtn5E5jtV66JpAulcrgdMGd4nwGS2EudbUM5owHSMt7xTwl
E+8Vsm/yrXMvG+qCKpevXQlGeRBibn9YCemN/piw3oXobxEzf6TVTIHD1yWC6ZuX3WH3n5DJ0Hlh
vkWsYProTD0pvDvwsP4uAT0YdJvprJoX1mUE2Th0Cr+Fc0aD7NOo/ZphyZIlS5YsWbJkyZIlS5Ys
WbJkyZIlS5YsWbJkyZIlS5YsWbJk6f+L/gssSwiDAFAAAA==
</data>

          </attachment>
      

    </bug>

</bugzilla>