<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>28480</bug_id>
          
          <creation_ts>2009-08-19 20:14:06 -0700</creation_ts>
          <short_desc>Don&apos;t let local files access web URLs</short_desc>
          <delta_ts>2009-08-26 23:28:01 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Adam Barth">abarth</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>darin</cc>
    
    <cc>eric</cc>
    
    <cc>jmalonzo</cc>
    
    <cc>mjs</cc>
    
    <cc>mrowe</cc>
    
    <cc>sam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>141716</commentid>
    <comment_count>0</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-19 20:14:06 -0700</bug_when>
    <thetext>We shouldn&apos;t let local files access web URLs.  Our current behavior makes HTML files loaded from your local file system super dangerous.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141717</commentid>
    <comment_count>1</comment_count>
      <attachid>35180</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-19 20:16:21 -0700</bug_when>
    <thetext>Created attachment 35180
Patch v1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141719</commentid>
    <comment_count>2</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-19 20:17:07 -0700</bug_when>
    <thetext>Chrome has been running with this setting for like a year with no problems.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141723</commentid>
    <comment_count>3</comment_count>
      <attachid>35180</attachid>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2009-08-19 20:37:39 -0700</bug_when>
    <thetext>Comment on attachment 35180
Patch v1

&gt; diff --git a/WebKit/mac/ChangeLog b/WebKit/mac/ChangeLog
&gt; index 5335efb..e01f625 100644
&gt; --- a/WebKit/mac/ChangeLog
&gt; +++ b/WebKit/mac/ChangeLog
&gt; @@ -1,3 +1,13 @@
&gt; +2009-08-19  Adam Barth  &lt;abarth@webkit.org&gt;
&gt; +
&gt; +        Reviewed by NOBODY (OOPS!).
&gt; +
&gt; +        Don&apos;t let local files access web URLs
&gt; +        https://bugs.webkit.org/show_bug.cgi?id=28480
&gt; +
&gt; +        * WebView/WebPreferences.mm:
&gt; +        (+[WebPreferences initialize]):
&gt; +
&gt;  2009-08-18  Anders Carlsson  &lt;andersca@apple.com&gt;
&gt;  
&gt;          Reviewed by Adele Peterson.
&gt; diff --git a/WebKit/mac/WebView/WebPreferences.mm b/WebKit/mac/WebView/WebPreferences.mm
&gt; index 0b40b59..cfd24ef 100644
&gt; --- a/WebKit/mac/WebView/WebPreferences.mm
&gt; +++ b/WebKit/mac/WebView/WebPreferences.mm
&gt; @@ -315,7 +315,11 @@ static WebCacheModel cacheModelForMainBundle(void)
&gt;          [NSNumber numberWithBool:YES],  WebKitJavaEnabledPreferenceKey,
&gt;          [NSNumber numberWithBool:YES],  WebKitJavaScriptEnabledPreferenceKey,
&gt;          [NSNumber numberWithBool:YES],  WebKitWebSecurityEnabledPreferenceKey,
&gt; +#if ENABLE(DASHBOARD_SUPPORT)
&gt;          [NSNumber numberWithBool:YES],  WebKitAllowUniversalAccessFromFileURLsPreferenceKey,
&gt; +#else
&gt; +        [NSNumber numberWithBool:NO],   WebKitAllowUniversalAccessFromFileURLsPreferenceKey,
&gt; +#endif
&gt;          [NSNumber numberWithBool:YES],  WebKitJavaScriptCanOpenWindowsAutomaticallyPreferenceKey,
&gt;          [NSNumber numberWithBool:YES],  WebKitPluginsEnabledPreferenceKey,
&gt;          [NSNumber numberWithBool:YES],  WebKitDatabasesEnabledPreferenceKey,

Since dashboard support is always compiled in on Mac OS X this still results in the setting being on for Mac OS X.  A more sensible change may be to use a linked-on-or-after check to set default value of this preference to YES for existing applications while newly-written applications would get NO as the value.

You also appear to have omitted GTK from these changes.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141782</commentid>
    <comment_count>4</comment_count>
      <attachid>38357</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-20 22:37:10 -0700</bug_when>
    <thetext>Created attachment 38357
set file url pref to secure


---
 11 files changed, 61 insertions(+), 3 deletions(-)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141887</commentid>
    <comment_count>5</comment_count>
      <attachid>38357</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-08-21 09:24:17 -0700</bug_when>
    <thetext>Comment on attachment 38357
set file url pref to secure

Looks fine to me.  What about Gtk?  Mark should at least see this since he reviewed the previous patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141891</commentid>
    <comment_count>6</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-21 09:37:25 -0700</bug_when>
    <thetext>I&apos;m going to hold off landing this for a little while to give folks a chance to comment.

In the blackout, I commented that I omitted GTK on purpose because I didn&apos;t see a public API for manipulating this setting.  I&apos;ll file a followup bug about that after we resolve this one.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>141997</commentid>
    <comment_count>7</comment_count>
    <who name="Jan Alonzo">jmalonzo</who>
    <bug_when>2009-08-21 14:57:22 -0700</bug_when>
    <thetext>(In reply to comment #6)
&gt; I&apos;m going to hold off landing this for a little while to give folks a chance to
&gt; comment.
&gt; 
&gt; In the blackout, I commented that I omitted GTK on purpose because I didn&apos;t see
&gt; a public API for manipulating this setting.  I&apos;ll file a followup bug about
&gt; that after we resolve this one.

FWIW, for GTK, we have WebKit/gtk/webkit/webkitwebsettings for the API and update the values of WebCore::Settings in WebKit/gtk/webkit/webkitwebview (webkit_web_view_update_settings function).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142002</commentid>
    <comment_count>8</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-08-21 15:00:35 -0700</bug_when>
    <thetext>-    CFDictionaryAddValue(defaults, CFSTR(WebKitAllowUniversalAccessFromFileURLsPreferenceKey), kCFBooleanTrue);
+    CFDictionaryAddValue(defaults, CFSTR(WebKitAllowUniversalAccessFromFileURLsPreferenceKey), kCFBooleanFalse);

These are default preferences - what about users who already had Safari installed on their machines before upgrading to a version that has this change?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142102</commentid>
    <comment_count>9</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-21 23:06:46 -0700</bug_when>
    <thetext>(In reply to comment #8)
&gt; These are default preferences - what about users who already had Safari
&gt; installed on their machines before upgrading to a version that has this change?

Oh, I have no idea how preferences work on the Mac.  If they haven&apos;t overridden the default, will this not affect them?

I guess one option is to rename the pref key.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142120</commentid>
    <comment_count>10</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-08-22 08:46:49 -0700</bug_when>
    <thetext>Hmm, you are probably right - I don&apos;t see the preference written in com.apple.Safari defaults, so the default doesn&apos;t seem to be permanent.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142168</commentid>
    <comment_count>11</comment_count>
      <attachid>38357</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-22 21:21:08 -0700</bug_when>
    <thetext>Comment on attachment 38357
set file url pref to secure

Rejecting patch 38357 from commit-queue.  This patch will require manual commit.

Found no modified ChangeLogs, cannot create a commit message.
All changes require a ChangeLog.  See:
http://webkit.org/coding/contributing.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142169</commentid>
    <comment_count>12</comment_count>
      <attachid>38357</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-22 21:24:20 -0700</bug_when>
    <thetext>Comment on attachment 38357
set file url pref to secure

Clearing flags on attachment: 38357

Committed r47684: &lt;http://trac.webkit.org/changeset/47684&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142171</commentid>
    <comment_count>13</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-22 21:24:25 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142172</commentid>
    <comment_count>14</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-22 21:45:04 -0700</bug_when>
    <thetext>After a discussion on IRC, I&apos;ve reverted this change.  The consensus was to make this change later after various clients have had a chance to opt into the insecure setting if they need it for some reason.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142516</commentid>
    <comment_count>15</comment_count>
      <attachid>38528</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-24 23:11:42 -0700</bug_when>
    <thetext>Created attachment 38528
set file url pref to secure


---
 8 files changed, 44 insertions(+), 2 deletions(-)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142518</commentid>
    <comment_count>16</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-24 23:13:10 -0700</bug_when>
    <thetext>As discussed on webkit-dev, I&apos;ve updated this patch to affect win and qt, but not mac.  I&apos;d still like to do GTK in another patch because I don&apos;t quite understand its preference system.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142568</commentid>
    <comment_count>17</comment_count>
    <who name="Jan Alonzo">jmalonzo</who>
    <bug_when>2009-08-25 05:57:40 -0700</bug_when>
    <thetext>(In reply to comment #16)
&gt; not mac.  I&apos;d still like to do GTK in another patch because I don&apos;t quite
&gt; understand its preference system.

Hi Adam. 

This is already implemented for GTK[1] following your email to webkit-dev.

[1] http://trac.webkit.org/changeset/47690</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>142589</commentid>
    <comment_count>18</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-25 09:13:44 -0700</bug_when>
    <thetext>(In reply to comment #17)
&gt; This is already implemented for GTK[1] following your email to webkit-dev.

Awesome!  One detail: you might want to set the setting to true in DumpRenderTree because some of the LayoutTests assume file URLs can access data URLs.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143049</commentid>
    <comment_count>19</comment_count>
      <attachid>38528</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-08-26 22:16:04 -0700</bug_when>
    <thetext>Comment on attachment 38528
set file url pref to secure

Rejecting patch 38528 from commit-queue.  This patch will require manual commit.

[&apos;WebKitTools/Scripts/run-webkit-tests&apos;, &apos;--no-launch-safari&apos;, &apos;--quiet&apos;, &apos;--exit-after-n-failures=1&apos;] failed with exit code 1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143050</commentid>
    <comment_count>20</comment_count>
      <attachid>38528</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-26 22:21:43 -0700</bug_when>
    <thetext>Comment on attachment 38528
set file url pref to secure

Clearing flags on attachment: 38528

Committed r47807: &lt;http://trac.webkit.org/changeset/47807&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143051</commentid>
    <comment_count>21</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-08-26 22:21:50 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>143066</commentid>
    <comment_count>22</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2009-08-26 23:28:01 -0700</bug_when>
    <thetext>Sorry.  run-webkit-tests had left an httpd process running causing all http tests to fail on the commit-queue bot.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>35180</attachid>
            <date>2009-08-19 20:16:21 -0700</date>
            <delta_ts>2009-08-20 22:37:06 -0700</delta_ts>
            <desc>Patch v1</desc>
            <filename>bug-28480-20090819201620.patch</filename>
            <type>text/plain</type>
            <size>7385</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1dlYktpdC9tYWMvQ2hhbmdlTG9nIGIvV2ViS2l0L21hYy9DaGFuZ2VMb2cK
aW5kZXggNTMzNWVmYi4uZTAxZjYyNSAxMDA2NDQKLS0tIGEvV2ViS2l0L21hYy9DaGFuZ2VMb2cK
KysrIGIvV2ViS2l0L21hYy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxMyBAQAorMjAwOS0wOC0xOSAg
QWRhbSBCYXJ0aCAgPGFiYXJ0aEB3ZWJraXQub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5P
Qk9EWSAoT09QUyEpLgorCisgICAgICAgIERvbid0IGxldCBsb2NhbCBmaWxlcyBhY2Nlc3Mgd2Vi
IFVSTHMKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTI4
NDgwCisKKyAgICAgICAgKiBXZWJWaWV3L1dlYlByZWZlcmVuY2VzLm1tOgorICAgICAgICAoK1tX
ZWJQcmVmZXJlbmNlcyBpbml0aWFsaXplXSk6CisKIDIwMDktMDgtMTggIEFuZGVycyBDYXJsc3Nv
biAgPGFuZGVyc2NhQGFwcGxlLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBBZGVsZSBQZXRl
cnNvbi4KZGlmZiAtLWdpdCBhL1dlYktpdC9tYWMvV2ViVmlldy9XZWJQcmVmZXJlbmNlcy5tbSBi
L1dlYktpdC9tYWMvV2ViVmlldy9XZWJQcmVmZXJlbmNlcy5tbQppbmRleCAwYjQwYjU5Li5jZmQy
NGVmIDEwMDY0NAotLS0gYS9XZWJLaXQvbWFjL1dlYlZpZXcvV2ViUHJlZmVyZW5jZXMubW0KKysr
IGIvV2ViS2l0L21hYy9XZWJWaWV3L1dlYlByZWZlcmVuY2VzLm1tCkBAIC0zMTUsNyArMzE1LDEx
IEBAIHN0YXRpYyBXZWJDYWNoZU1vZGVsIGNhY2hlTW9kZWxGb3JNYWluQnVuZGxlKHZvaWQpCiAg
ICAgICAgIFtOU051bWJlciBudW1iZXJXaXRoQm9vbDpZRVNdLCAgV2ViS2l0SmF2YUVuYWJsZWRQ
cmVmZXJlbmNlS2V5LAogICAgICAgICBbTlNOdW1iZXIgbnVtYmVyV2l0aEJvb2w6WUVTXSwgIFdl
YktpdEphdmFTY3JpcHRFbmFibGVkUHJlZmVyZW5jZUtleSwKICAgICAgICAgW05TTnVtYmVyIG51
bWJlcldpdGhCb29sOllFU10sICBXZWJLaXRXZWJTZWN1cml0eUVuYWJsZWRQcmVmZXJlbmNlS2V5
LAorI2lmIEVOQUJMRShEQVNIQk9BUkRfU1VQUE9SVCkKICAgICAgICAgW05TTnVtYmVyIG51bWJl
cldpdGhCb29sOllFU10sICBXZWJLaXRBbGxvd1VuaXZlcnNhbEFjY2Vzc0Zyb21GaWxlVVJMc1By
ZWZlcmVuY2VLZXksCisjZWxzZQorICAgICAgICBbTlNOdW1iZXIgbnVtYmVyV2l0aEJvb2w6Tk9d
LCAgIFdlYktpdEFsbG93VW5pdmVyc2FsQWNjZXNzRnJvbUZpbGVVUkxzUHJlZmVyZW5jZUtleSwK
KyNlbmRpZgogICAgICAgICBbTlNOdW1iZXIgbnVtYmVyV2l0aEJvb2w6WUVTXSwgIFdlYktpdEph
dmFTY3JpcHRDYW5PcGVuV2luZG93c0F1dG9tYXRpY2FsbHlQcmVmZXJlbmNlS2V5LAogICAgICAg
ICBbTlNOdW1iZXIgbnVtYmVyV2l0aEJvb2w6WUVTXSwgIFdlYktpdFBsdWdpbnNFbmFibGVkUHJl
ZmVyZW5jZUtleSwKICAgICAgICAgW05TTnVtYmVyIG51bWJlcldpdGhCb29sOllFU10sICBXZWJL
aXREYXRhYmFzZXNFbmFibGVkUHJlZmVyZW5jZUtleSwKZGlmZiAtLWdpdCBhL1dlYktpdC9xdC9B
cGkvcXdlYnNldHRpbmdzLmNwcCBiL1dlYktpdC9xdC9BcGkvcXdlYnNldHRpbmdzLmNwcAppbmRl
eCA1NmFjMTcwLi4xYzgzYTRkIDEwMDY0NAotLS0gYS9XZWJLaXQvcXQvQXBpL3F3ZWJzZXR0aW5n
cy5jcHAKKysrIGIvV2ViS2l0L3F0L0FwaS9xd2Vic2V0dGluZ3MuY3BwCkBAIC0zNjEsNyArMzYx
LDcgQEAgUVdlYlNldHRpbmdzOjpRV2ViU2V0dGluZ3MoKQogICAgIGQtPmF0dHJpYnV0ZXMuaW5z
ZXJ0KFFXZWJTZXR0aW5nczo6T2ZmbGluZVN0b3JhZ2VEYXRhYmFzZUVuYWJsZWQsIHRydWUpOwog
ICAgIGQtPmF0dHJpYnV0ZXMuaW5zZXJ0KFFXZWJTZXR0aW5nczo6T2ZmbGluZVdlYkFwcGxpY2F0
aW9uQ2FjaGVFbmFibGVkLCB0cnVlKTsKICAgICBkLT5hdHRyaWJ1dGVzLmluc2VydChRV2ViU2V0
dGluZ3M6OkxvY2FsU3RvcmFnZUVuYWJsZWQsIGZhbHNlKTsKLSAgICBkLT5hdHRyaWJ1dGVzLmlu
c2VydChRV2ViU2V0dGluZ3M6OkxvY2FsQ29udGVudENhbkFjY2Vzc1JlbW90ZVVybHMsIHRydWUp
OworICAgIGQtPmF0dHJpYnV0ZXMuaW5zZXJ0KFFXZWJTZXR0aW5nczo6TG9jYWxDb250ZW50Q2Fu
QWNjZXNzUmVtb3RlVXJscywgZmFsc2UpOwogICAgIGQtPm9mZmxpbmVTdG9yYWdlRGVmYXVsdFF1
b3RhID0gNSAqIDEwMjQgKiAxMDI0OwogfQogCmRpZmYgLS1naXQgYS9XZWJLaXQvcXQvQ2hhbmdl
TG9nIGIvV2ViS2l0L3F0L0NoYW5nZUxvZwppbmRleCBjNTE0N2VkLi5iOTdkMTIzIDEwMDY0NAot
LS0gYS9XZWJLaXQvcXQvQ2hhbmdlTG9nCisrKyBiL1dlYktpdC9xdC9DaGFuZ2VMb2cKQEAgLTEs
MyArMSwxMyBAQAorMjAwOS0wOC0xOSAgQWRhbSBCYXJ0aCAgPGFiYXJ0aEB3ZWJraXQub3JnPgor
CisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIERvbid0IGxl
dCBsb2NhbCBmaWxlcyBhY2Nlc3Mgd2ViIFVSTHMKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtp
dC5vcmcvc2hvd19idWcuY2dpP2lkPTI4NDgwCisKKyAgICAgICAgKiBBcGkvcXdlYnNldHRpbmdz
LmNwcDoKKyAgICAgICAgKFFXZWJTZXR0aW5nczo6UVdlYlNldHRpbmdzKToKKwogMjAwOS0wOC0x
OCAgTWFya3VzIEdvZXR6IDxNYXJrdXMuR29ldHpAbm9raWEuY29tPgogCiAgICAgICAgIFJldml3
ZWQgYnkgQXJpeWEgSGlkYXlhdC4KZGlmZiAtLWdpdCBhL1dlYktpdC93aW4vQ2hhbmdlTG9nIGIv
V2ViS2l0L3dpbi9DaGFuZ2VMb2cKaW5kZXggYjFhZjUxMS4uY2FkN2MwNyAxMDA2NDQKLS0tIGEv
V2ViS2l0L3dpbi9DaGFuZ2VMb2cKKysrIGIvV2ViS2l0L3dpbi9DaGFuZ2VMb2cKQEAgLTEsMyAr
MSwxMyBAQAorMjAwOS0wOC0xOSAgQWRhbSBCYXJ0aCAgPGFiYXJ0aEB3ZWJraXQub3JnPgorCisg
ICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIERvbid0IGxldCBs
b2NhbCBmaWxlcyBhY2Nlc3Mgd2ViIFVSTHMKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v
cmcvc2hvd19idWcuY2dpP2lkPTI4NDgwCisKKyAgICAgICAgKiBXZWJQcmVmZXJlbmNlcy5jcHA6
CisgICAgICAgIChXZWJQcmVmZXJlbmNlczo6aW5pdGlhbGl6ZURlZmF1bHRTZXR0aW5ncyk6CisK
IDIwMDktMDgtMTggIEJyaWFuIFdlaW5zdGVpbiAgPGJ3ZWluc3RlaW5AYXBwbGUuY29tPgogCiAg
ICAgICAgIFJldmlld2VkIGJ5IE9saXZlciBIdW50LgpkaWZmIC0tZ2l0IGEvV2ViS2l0L3dpbi9X
ZWJQcmVmZXJlbmNlcy5jcHAgYi9XZWJLaXQvd2luL1dlYlByZWZlcmVuY2VzLmNwcAppbmRleCAx
ZTE1ODAwLi40MDFmZWZkIDEwMDY0NAotLS0gYS9XZWJLaXQvd2luL1dlYlByZWZlcmVuY2VzLmNw
cAorKysgYi9XZWJLaXQvd2luL1dlYlByZWZlcmVuY2VzLmNwcApAQCAtMjA0LDcgKzIwNCw3IEBA
IHZvaWQgV2ViUHJlZmVyZW5jZXM6OmluaXRpYWxpemVEZWZhdWx0U2V0dGluZ3MoKQogICAgIENG
RGljdGlvbmFyeUFkZFZhbHVlKGRlZmF1bHRzLCBDRlNUUihXZWJLaXRKYXZhRW5hYmxlZFByZWZl
cmVuY2VLZXkpLCBrQ0ZCb29sZWFuVHJ1ZSk7CiAgICAgQ0ZEaWN0aW9uYXJ5QWRkVmFsdWUoZGVm
YXVsdHMsIENGU1RSKFdlYktpdEphdmFTY3JpcHRFbmFibGVkUHJlZmVyZW5jZUtleSksIGtDRkJv
b2xlYW5UcnVlKTsKICAgICBDRkRpY3Rpb25hcnlBZGRWYWx1ZShkZWZhdWx0cywgQ0ZTVFIoV2Vi
S2l0V2ViU2VjdXJpdHlFbmFibGVkUHJlZmVyZW5jZUtleSksIGtDRkJvb2xlYW5UcnVlKTsKLSAg
ICBDRkRpY3Rpb25hcnlBZGRWYWx1ZShkZWZhdWx0cywgQ0ZTVFIoV2ViS2l0QWxsb3dVbml2ZXJz
YWxBY2Nlc3NGcm9tRmlsZVVSTHNQcmVmZXJlbmNlS2V5KSwga0NGQm9vbGVhblRydWUpOworICAg
IENGRGljdGlvbmFyeUFkZFZhbHVlKGRlZmF1bHRzLCBDRlNUUihXZWJLaXRBbGxvd1VuaXZlcnNh
bEFjY2Vzc0Zyb21GaWxlVVJMc1ByZWZlcmVuY2VLZXkpLCBrQ0ZCb29sZWFuRmFsc2UpOwogICAg
IENGRGljdGlvbmFyeUFkZFZhbHVlKGRlZmF1bHRzLCBDRlNUUihXZWJLaXRYU1NBdWRpdG9yRW5h
YmxlZFByZWZlcmVuY2VLZXkpLCBrQ0ZCb29sZWFuVHJ1ZSk7CiAgICAgQ0ZEaWN0aW9uYXJ5QWRk
VmFsdWUoZGVmYXVsdHMsIENGU1RSKFdlYktpdEphdmFTY3JpcHRDYW5PcGVuV2luZG93c0F1dG9t
YXRpY2FsbHlQcmVmZXJlbmNlS2V5KSwga0NGQm9vbGVhblRydWUpOwogICAgIENGRGljdGlvbmFy
eUFkZFZhbHVlKGRlZmF1bHRzLCBDRlNUUihXZWJLaXRQbHVnaW5zRW5hYmxlZFByZWZlcmVuY2VL
ZXkpLCBrQ0ZCb29sZWFuVHJ1ZSk7CmRpZmYgLS1naXQgYS9XZWJLaXRUb29scy9DaGFuZ2VMb2cg
Yi9XZWJLaXRUb29scy9DaGFuZ2VMb2cKaW5kZXggYzc3NjIyMi4uMzRlYmM3MSAxMDA2NDQKLS0t
IGEvV2ViS2l0VG9vbHMvQ2hhbmdlTG9nCisrKyBiL1dlYktpdFRvb2xzL0NoYW5nZUxvZwpAQCAt
MSwzICsxLDIxIEBACisyMDA5LTA4LTE5ICBBZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+
CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgRG9uJ3Qg
bGV0IGxvY2FsIGZpbGVzIGFjY2VzcyB3ZWIgVVJMcworICAgICAgICBodHRwczovL2J1Z3Mud2Vi
a2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Mjg0ODAKKworICAgICAgICBBIGJ1bmNoIG9mIG91ciBM
YXlvdXRUZXN0cyByZWx5IG9uIG91ciBvbGQgYmVoYXZpb3IsIHNvIHdlIGV4cGxpY2l0bHkKKyAg
ICAgICAgZ3JhbnQgbG9jYWwgZmlsZXMgdW5pdmVyc2FsIGFjY2VzcyBkdXJpbmcgdGVzdGluZy4g
IE1haW5seSwgdGhlc2UgdGVzdHMKKyAgICAgICAgaW52b2x2ZSBtYWtpbmcgWE1MSHR0cFJlcXVl
c3RzIGZvciBkYXRhIFVSTHMuCisKKyAgICAgICAgKiBEdW1wUmVuZGVyVHJlZS9tYWMvRHVtcFJl
bmRlclRyZWUubW06CisgICAgICAgIChyZXNldERlZmF1bHRzVG9Db25zaXN0ZW50VmFsdWVzKToK
KyAgICAgICAgKiBEdW1wUmVuZGVyVHJlZS9xdC9EdW1wUmVuZGVyVHJlZS5jcHA6CisgICAgICAg
IChXZWJDb3JlOjpXZWJQYWdlOjpXZWJQYWdlKToKKyAgICAgICAgKiBEdW1wUmVuZGVyVHJlZS93
aW4vRHVtcFJlbmRlclRyZWUuY3BwOgorICAgICAgICAocmVzZXREZWZhdWx0c1RvQ29uc2lzdGVu
dFZhbHVlcyk6CisKIDIwMDktMDgtMTkgIEVyaWMgU2VpZGVsICA8ZXJpY0B3ZWJraXQub3JnPgog
CiAgICAgICAgIFJldmlld2VkIGJ5IEFkYW0gQmFydGguCmRpZmYgLS1naXQgYS9XZWJLaXRUb29s
cy9EdW1wUmVuZGVyVHJlZS9tYWMvRHVtcFJlbmRlclRyZWUubW0gYi9XZWJLaXRUb29scy9EdW1w
UmVuZGVyVHJlZS9tYWMvRHVtcFJlbmRlclRyZWUubW0KaW5kZXggMGFjZmY3Ny4uZTZhZGQxMyAx
MDA2NDQKLS0tIGEvV2ViS2l0VG9vbHMvRHVtcFJlbmRlclRyZWUvbWFjL0R1bXBSZW5kZXJUcmVl
Lm1tCisrKyBiL1dlYktpdFRvb2xzL0R1bXBSZW5kZXJUcmVlL21hYy9EdW1wUmVuZGVyVHJlZS5t
bQpAQCAtMzg4LDYgKzM4OCw3IEBAIHN0YXRpYyB2b2lkIHJlc2V0RGVmYXVsdHNUb0NvbnNpc3Rl
bnRWYWx1ZXMoKQogCiAgICAgV2ViUHJlZmVyZW5jZXMgKnByZWZlcmVuY2VzID0gW1dlYlByZWZl
cmVuY2VzIHN0YW5kYXJkUHJlZmVyZW5jZXNdOwogCisgICAgW3ByZWZlcmVuY2VzIHNldEFsbG93
VW5pdmVyc2FsQWNjZXNzRnJvbUZpbGVVUkxzOllFU107CiAgICAgW3ByZWZlcmVuY2VzIHNldFN0
YW5kYXJkRm9udEZhbWlseTpAIlRpbWVzIl07CiAgICAgW3ByZWZlcmVuY2VzIHNldEZpeGVkRm9u
dEZhbWlseTpAIkNvdXJpZXIiXTsKICAgICBbcHJlZmVyZW5jZXMgc2V0U2VyaWZGb250RmFtaWx5
OkAiVGltZXMiXTsKZGlmZiAtLWdpdCBhL1dlYktpdFRvb2xzL0R1bXBSZW5kZXJUcmVlL3F0L0R1
bXBSZW5kZXJUcmVlLmNwcCBiL1dlYktpdFRvb2xzL0R1bXBSZW5kZXJUcmVlL3F0L0R1bXBSZW5k
ZXJUcmVlLmNwcAppbmRleCAxNjdhNGM1Li41YzI5ZmJhIDEwMDY0NAotLS0gYS9XZWJLaXRUb29s
cy9EdW1wUmVuZGVyVHJlZS9xdC9EdW1wUmVuZGVyVHJlZS5jcHAKKysrIGIvV2ViS2l0VG9vbHMv
RHVtcFJlbmRlclRyZWUvcXQvRHVtcFJlbmRlclRyZWUuY3BwCkBAIC0xMTAsNiArMTEwLDggQEAg
V2ViUGFnZTo6V2ViUGFnZShRV2lkZ2V0ICpwYXJlbnQsIER1bXBSZW5kZXJUcmVlICpkcnQpCiAg
ICAgc2V0dGluZ3MoKS0+c2V0QXR0cmlidXRlKFFXZWJTZXR0aW5nczo6TGlua3NJbmNsdWRlZElu
Rm9jdXNDaGFpbiwgZmFsc2UpOwogICAgIHNldHRpbmdzKCktPnNldEF0dHJpYnV0ZShRV2ViU2V0
dGluZ3M6OlBsdWdpbnNFbmFibGVkLCB0cnVlKTsKICAgICBzZXR0aW5ncygpLT5zZXRBdHRyaWJ1
dGUoUVdlYlNldHRpbmdzOjpMb2NhbFN0b3JhZ2VFbmFibGVkLCB0cnVlKTsKKyAgICBzZXR0aW5n
cygpLT5zZXRBdHRyaWJ1dGUoUVdlYlNldHRpbmdzOjpMb2NhbENvbnRlbnRDYW5BY2Nlc3NSZW1v
dGVVcmxzLCB0cnVlKTsKKwogICAgIGNvbm5lY3QodGhpcywgU0lHTkFMKGdlb21ldHJ5Q2hhbmdl
UmVxdWVzdGVkKGNvbnN0IFFSZWN0ICYpKSwKICAgICAgICAgICAgIHRoaXMsIFNMT1Qoc2V0Vmll
d0dlb21ldHJ5KGNvbnN0IFFSZWN0ICYgKSkpOwogCmRpZmYgLS1naXQgYS9XZWJLaXRUb29scy9E
dW1wUmVuZGVyVHJlZS93aW4vRHVtcFJlbmRlclRyZWUuY3BwIGIvV2ViS2l0VG9vbHMvRHVtcFJl
bmRlclRyZWUvd2luL0R1bXBSZW5kZXJUcmVlLmNwcAppbmRleCAwMjI4OTA1Li5lZjZiMjE5IDEw
MDY0NAotLS0gYS9XZWJLaXRUb29scy9EdW1wUmVuZGVyVHJlZS93aW4vRHVtcFJlbmRlclRyZWUu
Y3BwCisrKyBiL1dlYktpdFRvb2xzL0R1bXBSZW5kZXJUcmVlL3dpbi9EdW1wUmVuZGVyVHJlZS5j
cHAKQEAgLTcwOSw2ICs3MDksNyBAQCBzdGF0aWMgdm9pZCByZXNldERlZmF1bHRzVG9Db25zaXN0
ZW50VmFsdWVzKElXZWJQcmVmZXJlbmNlcyogcHJlZmVyZW5jZXMpCiAKICAgICBDT01QdHI8SVdl
YlByZWZlcmVuY2VzUHJpdmF0ZT4gcHJlZnNQcml2YXRlKFF1ZXJ5LCBwcmVmZXJlbmNlcyk7CiAg
ICAgaWYgKHByZWZzUHJpdmF0ZSkgeworICAgICAgICBwcmVmc1ByaXZhdGUtPnNldEFsbG93VW5p
dmVyc2FsQWNjZXNzRnJvbUZpbGVVUkxzKFRSVUUpOwogICAgICAgICBwcmVmc1ByaXZhdGUtPnNl
dEF1dGhvckFuZFVzZXJTdHlsZXNFbmFibGVkKFRSVUUpOwogICAgICAgICBwcmVmc1ByaXZhdGUt
PnNldERldmVsb3BlckV4dHJhc0VuYWJsZWQoRkFMU0UpOwogICAgICAgICBwcmVmc1ByaXZhdGUt
PnNldFNob3VsZFBhaW50TmF0aXZlQ29udHJvbHMoRkFMU0UpOyAvLyBGSVhNRSAtIG5lZWQgdG8g
bWFrZSBEUlQgcGFzcyB3aXRoIFdpbmRvd3MgbmF0aXZlIGNvbnRyb2xzIDxodHRwOi8vYnVncy53
ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yNTU5Mj4=
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>38357</attachid>
            <date>2009-08-20 22:37:10 -0700</date>
            <delta_ts>2009-08-24 23:11:37 -0700</delta_ts>
            <desc>set file url pref to secure</desc>
            <filename>bug-28480-20090820223709.patch</filename>
            <type>text/plain</type>
            <size>8627</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1dlYktpdC9tYWMvQ2hhbmdlTG9nIGIvV2ViS2l0L21hYy9DaGFuZ2VMb2cK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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>38528</attachid>
            <date>2009-08-24 23:11:42 -0700</date>
            <delta_ts>2009-08-26 22:21:43 -0700</delta_ts>
            <desc>set file url pref to secure</desc>
            <filename>bug-28480-20090824231141.patch</filename>
            <type>text/plain</type>
            <size>5870</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1dlYktpdC9xdC9BcGkvcXdlYnNldHRpbmdzLmNwcCBiL1dlYktpdC9xdC9B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=
</data>

          </attachment>
      

    </bug>

</bugzilla>