<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>233646</bug_id>
          
          <creation_ts>2021-11-30 10:46:10 -0800</creation_ts>
          <short_desc>[Hardening] Early return in JSLazyEventListener::initializeJSFunction() if !settings().scriptMarkupEnabled()</short_desc>
          <delta_ts>2021-11-30 13:41:27 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=233642</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>ggaren</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1818823</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2021-11-30 10:46:10 -0800</bug_when>
    <thetext>Early return in JSLazyEventListener::initializeJSFunction() if !settings().scriptMarkupEnabled() as a hardening measure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1818824</commentid>
    <comment_count>1</comment_count>
      <attachid>445442</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2021-11-30 10:47:31 -0800</bug_when>
    <thetext>Created attachment 445442
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1818828</commentid>
    <comment_count>2</comment_count>
      <attachid>445442</attachid>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2021-11-30 10:48:26 -0800</bug_when>
    <thetext>Comment on attachment 445442
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1818829</commentid>
    <comment_count>3</comment_count>
      <attachid>445443</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2021-11-30 10:49:20 -0800</bug_when>
    <thetext>Created attachment 445443
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1818916</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-11-30 13:40:35 -0800</bug_when>
    <thetext>Committed r286324 (244683@main): &lt;https://commits.webkit.org/244683@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 445443.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1818917</commentid>
    <comment_count>5</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-11-30 13:41:27 -0800</bug_when>
    <thetext>&lt;rdar://problem/85886298&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>445442</attachid>
            <date>2021-11-30 10:47:31 -0800</date>
            <delta_ts>2021-11-30 10:49:18 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-233646-20211130104730.patch</filename>
            <type>text/plain</type>
            <size>1845</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjg2MzA1CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D
aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMjAzOTM2MGJiNzEyNTU5
NDgwYTk3OWIxNWUzM2RkZjZhZWY4ZDk4YS4uMTIzYzI3NjcyYjc2ZmU1NmJhMWYwMzk1YjQ4MDdm
NjkwNmU1ZjI4NyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv
dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE2IEBACisyMDIxLTExLTMwICBDaHJp
cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgW0hhcmRlbmluZ10gRWFybHkg
cmV0dXJuIGluIEpTTGF6eUV2ZW50TGlzdGVuZXI6OmluaXRpYWxpemVKU0Z1bmN0aW9uKCkgaWYg
IXNldHRpbmdzKCkuc2NyaXB0TWFya3VwRW5hYmxlZCgpCisgICAgICAgIGh0dHBzOi8vYnVncy53
ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMzM2NDYKKworICAgICAgICBSZXZpZXdlZCBieSBO
T0JPRFkgKE9PUFMhKS4KKworICAgICAgICBFYXJseSByZXR1cm4gaW4gSlNMYXp5RXZlbnRMaXN0
ZW5lcjo6aW5pdGlhbGl6ZUpTRnVuY3Rpb24oKSBpZiAhc2V0dGluZ3MoKS5zY3JpcHRNYXJrdXBF
bmFibGVkKCkgYXMgYQorICAgICAgICBoYXJkZW5pbmcgbWVhc3VyZS4KKworICAgICAgICAqIGJp
bmRpbmdzL2pzL0pTTGF6eUV2ZW50TGlzdGVuZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SlNM
YXp5RXZlbnRMaXN0ZW5lcjo6aW5pdGlhbGl6ZUpTRnVuY3Rpb24gY29uc3QpOgorCiAyMDIxLTEx
LTMwICBZb3Vlbm4gRmFibGV0ICA8eW91ZW5uQGFwcGxlLmNvbT4KIAogICAgICAgICBBZGQgc3Vw
cG9ydCBmb3IgcnZmYyB0byBNZWRpYVBsYXllclByaXZhdGVNZWRpYVNvdXJjZUFWRk9iakMKZGlm
ZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2JpbmRpbmdzL2pzL0pTTGF6eUV2ZW50TGlzdGVuZXIu
Y3BwIGIvU291cmNlL1dlYkNvcmUvYmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAK
aW5kZXggMTM3MjNhYTk1Y2E5Nzg4ODAwNDY0ZDk0ODk0MGE3OGQxMmEwMDJkMi4uMzk1ZjFiNjVj
MGIzYzk4M2MxMjhiMGFkYjc0ZGE4YzQ4ZWMyYTgxYiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNv
cmUvYmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAKKysrIGIvU291cmNlL1dlYkNv
cmUvYmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAKQEAgLTEzOSw2ICsxMzksMTAg
QEAgSlNPYmplY3QqIEpTTGF6eUV2ZW50TGlzdGVuZXI6OmluaXRpYWxpemVKU0Z1bmN0aW9uKFNj
cmlwdEV4ZWN1dGlvbkNvbnRleHQmIGV4ZWMKICAgICBpZiAoIXNjcmlwdC5jYW5FeGVjdXRlU2Ny
aXB0cyhBYm91dFRvQ3JlYXRlRXZlbnRMaXN0ZW5lcikgfHwgc2NyaXB0LmlzUGF1c2VkKCkpCiAg
ICAgICAgIHJldHVybiBudWxscHRyOwogCisgICAgQVNTRVJUX1dJVEhfTUVTU0FHRShkb2N1bWVu
dC5zZXR0aW5ncygpLnNjcmlwdE1hcmt1cEVuYWJsZWQoKSwgIlNjcmlwdGluZyBlbGVtZW50cyBh
dHRyaWJ1dGVzIHNob3VsZCBoYXZlIGJlZW4gc3RyaXBwZWQgZHVyaW5nIHBhcnNpbmciKTsKKyAg
ICBpZiAoVU5MSUtFTFkoIWRvY3VtZW50LnNldHRpbmdzKCkuc2NyaXB0TWFya3VwRW5hYmxlZCgp
KSkKKyAgICAgICAgcmV0dXJuIG51bGxwdHI7CisKICAgICBpZiAoIWV4ZWN1dGlvbkNvbnRleHRE
b2N1bWVudC5mcmFtZSgpKQogICAgICAgICByZXR1cm4gbnVsbHB0cjsKICAgICBhdXRvKiBnbG9i
YWxPYmplY3QgPSB0b0pTRE9NV2luZG93KCpleGVjdXRpb25Db250ZXh0RG9jdW1lbnQuZnJhbWUo
KSwgaXNvbGF0ZWRXb3JsZCgpKTsK
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>445443</attachid>
            <date>2021-11-30 10:49:20 -0800</date>
            <delta_ts>2021-11-30 13:40:36 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-233646-20211130104919.patch</filename>
            <type>text/plain</type>
            <size>1841</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjg2MzA1CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D
aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMjAzOTM2MGJiNzEyNTU5
NDgwYTk3OWIxNWUzM2RkZjZhZWY4ZDk4YS4uMjIwMDQwYTFlYWJjYzA5MDk4NmZhNTE3Mjc4ZTQw
OWI3MjdiMWUzZiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv
dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE2IEBACisyMDIxLTExLTMwICBDaHJp
cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgW0hhcmRlbmluZ10gRWFybHkg
cmV0dXJuIGluIEpTTGF6eUV2ZW50TGlzdGVuZXI6OmluaXRpYWxpemVKU0Z1bmN0aW9uKCkgaWYg
IXNldHRpbmdzKCkuc2NyaXB0TWFya3VwRW5hYmxlZCgpCisgICAgICAgIGh0dHBzOi8vYnVncy53
ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMzM2NDYKKworICAgICAgICBSZXZpZXdlZCBieSBH
ZW9mZiBHYXJlbi4KKworICAgICAgICBFYXJseSByZXR1cm4gaW4gSlNMYXp5RXZlbnRMaXN0ZW5l
cjo6aW5pdGlhbGl6ZUpTRnVuY3Rpb24oKSBpZiAhc2V0dGluZ3MoKS5zY3JpcHRNYXJrdXBFbmFi
bGVkKCkgYXMgYQorICAgICAgICBoYXJkZW5pbmcgbWVhc3VyZS4KKworICAgICAgICAqIGJpbmRp
bmdzL2pzL0pTTGF6eUV2ZW50TGlzdGVuZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SlNMYXp5
RXZlbnRMaXN0ZW5lcjo6aW5pdGlhbGl6ZUpTRnVuY3Rpb24gY29uc3QpOgorCiAyMDIxLTExLTMw
ICBZb3Vlbm4gRmFibGV0ICA8eW91ZW5uQGFwcGxlLmNvbT4KIAogICAgICAgICBBZGQgc3VwcG9y
dCBmb3IgcnZmYyB0byBNZWRpYVBsYXllclByaXZhdGVNZWRpYVNvdXJjZUFWRk9iakMKZGlmZiAt
LWdpdCBhL1NvdXJjZS9XZWJDb3JlL2JpbmRpbmdzL2pzL0pTTGF6eUV2ZW50TGlzdGVuZXIuY3Bw
IGIvU291cmNlL1dlYkNvcmUvYmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAKaW5k
ZXggMTM3MjNhYTk1Y2E5Nzg4ODAwNDY0ZDk0ODk0MGE3OGQxMmEwMDJkMi4uYWJmMThkODliNjdh
NjYyYjc4MWFjNjM4NzY3MjNjNTM0NTUzODFlNiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUv
YmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUv
YmluZGluZ3MvanMvSlNMYXp5RXZlbnRMaXN0ZW5lci5jcHAKQEAgLTEzOSw2ICsxMzksMTAgQEAg
SlNPYmplY3QqIEpTTGF6eUV2ZW50TGlzdGVuZXI6OmluaXRpYWxpemVKU0Z1bmN0aW9uKFNjcmlw
dEV4ZWN1dGlvbkNvbnRleHQmIGV4ZWMKICAgICBpZiAoIXNjcmlwdC5jYW5FeGVjdXRlU2NyaXB0
cyhBYm91dFRvQ3JlYXRlRXZlbnRMaXN0ZW5lcikgfHwgc2NyaXB0LmlzUGF1c2VkKCkpCiAgICAg
ICAgIHJldHVybiBudWxscHRyOwogCisgICAgQVNTRVJUX1dJVEhfTUVTU0FHRShkb2N1bWVudC5z
ZXR0aW5ncygpLnNjcmlwdE1hcmt1cEVuYWJsZWQoKSwgIlNjcmlwdGluZyBlbGVtZW50IGF0dHJp
YnV0ZXMgc2hvdWxkIGhhdmUgYmVlbiBzdHJpcHBlZCBkdXJpbmcgcGFyc2luZyIpOworICAgIGlm
IChVTkxJS0VMWSghZG9jdW1lbnQuc2V0dGluZ3MoKS5zY3JpcHRNYXJrdXBFbmFibGVkKCkpKQor
ICAgICAgICByZXR1cm4gbnVsbHB0cjsKKwogICAgIGlmICghZXhlY3V0aW9uQ29udGV4dERvY3Vt
ZW50LmZyYW1lKCkpCiAgICAgICAgIHJldHVybiBudWxscHRyOwogICAgIGF1dG8qIGdsb2JhbE9i
amVjdCA9IHRvSlNET01XaW5kb3coKmV4ZWN1dGlvbkNvbnRleHREb2N1bWVudC5mcmFtZSgpLCBp
c29sYXRlZFdvcmxkKCkpOwo=
</data>

          </attachment>
      

    </bug>

</bugzilla>