<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>25040</bug_id>
          
          <creation_ts>2009-04-03 15:32:22 -0700</creation_ts>
          <short_desc>Make SecurityOrigin thread safe.</short_desc>
          <delta_ts>2023-03-27 08:46:51 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WONTFIX</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>24492</dependson>
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Jian Li">jianli</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>annevk</cc>
    
    <cc>ap</cc>
    
    <cc>dimich</cc>
    
    <cc>egyptnz27</cc>
    
    <cc>fishd</cc>
    
    <cc>jam</cc>
    
    <cc>levin</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>116498</commentid>
    <comment_count>0</comment_count>
    <who name="Jian Li">jianli</who>
    <bug_when>2009-04-03 15:32:22 -0700</bug_when>
    <thetext>We need to make SecurityOrigin thread safe, i.e., the way to initialize static values in SecurityOrigin and other classes it calls. Considering moving all statics into one place and use TLS.

Currently we assume that main thread will initialize a document and thus create a SecurityOrigin before any other thread that uses WebKit is run.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>116501</commentid>
    <comment_count>1</comment_count>
    <who name="Darin Fisher (:fishd, Google)">fishd</who>
    <bug_when>2009-04-03 15:53:38 -0700</bug_when>
    <thetext>I don&apos;t think TLS is a good answer.  What if someone modifies these tables lazily?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>116528</commentid>
    <comment_count>2</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-04-04 02:21:27 -0700</bug_when>
    <thetext>Yes, I do not see how TLS would be relevant here.

What we really need is to move SecurityOrigin checks out of XMLHttpRequest and into DocumentThreadableLoader.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>125736</commentid>
    <comment_count>3</comment_count>
    <who name="Darin Fisher (:fishd, Google)">fishd</who>
    <bug_when>2009-06-13 22:31:45 -0700</bug_when>
    <thetext>&gt; What we really need is to move SecurityOrigin checks out of XMLHttpRequest and
&gt; into DocumentThreadableLoader.

So that makes this bug WONTFIX right?  The implication being that SecurityOrigin checks will then only run on the WebKit main thread.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1944253</commentid>
    <comment_count>4</comment_count>
    <who name="Anne van Kesteren">annevk</who>
    <bug_when>2023-03-27 08:46:51 -0700</bug_when>
    <thetext>Resolving as WONTFIX per comment 3 and due to general inactivity.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>