32685 2009-12-17 16:57:15 -0800 add LayoutTests/http/security/xss-DENIED-assign-location-href-javascript.html 2009-12-17 22:40:01 -0800 1 1 1 Unclassified WebKit Tools / Tests 528+ (Nightly build) PC OS X 10.5 RESOLVED FIXED P2 Normal --- 1 dpranke dpranke abarth commit-queue webkit.review.bot oldest_to_newest 172991 0 dpranke 2009-12-17 16:57:15 -0800 Upstreaming this test from Chromium -- WebKit passes it, so I don't think there's a security issue. 172993 1 45111 dpranke 2009-12-17 17:02:43 -0800 Created attachment 45111 XSS test on setting document.location in a frame from a different origin 172995 2 webkit.review.bot 2009-12-17 17:05:50 -0800 style-queue ran check-webkit-style on attachment 45111 without any errors. 173048 3 45111 abarth 2009-12-17 22:30:56 -0800 Comment on attachment 45111 XSS test on setting document.location in a frame from a different origin Yay for passing tests. :) 173049 4 45111 commit-queue 2009-12-17 22:39:57 -0800 Comment on attachment 45111 XSS test on setting document.location in a frame from a different origin Clearing flags on attachment: 45111 Committed r52301: <http://trac.webkit.org/changeset/52301> 173050 5 commit-queue 2009-12-17 22:40:01 -0800 All reviewed patches have been landed. Closing bug. 45111 2009-12-17 17:02:43 -0800 2009-12-17 22:39:57 -0800 XSS test on setting document.location in a frame from a different origin wk32685.patch text/plain 2471 dpranke SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDUyMjk0KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMTMgQEAKKzIwMDktMTItMTcgIERpcmsgUHJhbmtlICA8ZHBy YW5rZUBjaHJvbWl1bS5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISku CisKKyAgICAgICAgVXBzdHJlYW1pbmcgYW4gWFNTIHRlc3QgZnJvbSBjaHJvbWl1bS5vcmcuCisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0zMjY4NQorCisg ICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS94c3MtREVOSUVELWFzc2lnbi1sb2NhdGlvbi1o cmVmLWphdmFzY3JpcHQtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3Rz L3NlY3VyaXR5L3hzcy1ERU5JRUQtYXNzaWduLWxvY2F0aW9uLWhyZWYtamF2YXNjcmlwdC5odG1s OiBBZGRlZC4KKwogMjAwOS0xMi0xNyAgUGF2ZWwgRmVsZG1hbiAgPHBmZWxkbWFuQGRoY3AtMTcy LTI4LTE3NC0yMjAuc3BiLmNvcnAuZ29vZ2xlLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBU aW1vdGh5IEhhdGNoZXIuCkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L3hz cy1ERU5JRUQtYXNzaWduLWxvY2F0aW9uLWhyZWYtamF2YXNjcmlwdC1leHBlY3RlZC50eHQKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3MtREVOSUVELWFz c2lnbi1sb2NhdGlvbi1ocmVmLWphdmFzY3JpcHQtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQor KysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS94c3MtREVOSUVELWFzc2lnbi1sb2Nh dGlvbi1ocmVmLWphdmFzY3JpcHQtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpAQCAtMCwwICsx LDEwIEBACitDT05TT0xFIE1FU1NBR0U6IGxpbmUgMTogVW5zYWZlIEphdmFTY3JpcHQgYXR0ZW1w dCB0byBhY2Nlc3MgZnJhbWUgd2l0aCBVUkwgaHR0cDovL2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5 L3Jlc291cmNlcy9sb2NhbFBhZ2UuaHRtbCBmcm9tIGZyYW1lIHdpdGggVVJMIGh0dHA6Ly8xMjcu MC4wLjE6ODAwMC9zZWN1cml0eS94c3MtREVOSUVELWFzc2lnbi1sb2NhdGlvbi1ocmVmLWphdmFz Y3JpcHQuaHRtbC4gRG9tYWlucywgcHJvdG9jb2xzIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgorCitD T05TT0xFIE1FU1NBR0U6IGxpbmUgMTogVW5zYWZlIEphdmFTY3JpcHQgYXR0ZW1wdCB0byBhY2Nl c3MgZnJhbWUgd2l0aCBVUkwgaHR0cDovL2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L3Jlc291cmNl cy9sb2NhbFBhZ2UuaHRtbCBmcm9tIGZyYW1lIHdpdGggVVJMIGh0dHA6Ly8xMjcuMC4wLjE6ODAw MC9zZWN1cml0eS94c3MtREVOSUVELWFzc2lnbi1sb2NhdGlvbi1ocmVmLWphdmFzY3JpcHQuaHRt bC4gRG9tYWlucywgcHJvdG9jb2xzIGFuZCBwb3J0cyBtdXN0IG1hdGNoLgorCisKKworLS0tLS0t LS0KK0ZyYW1lOiAnPCEtLWZyYW1lUGF0aCAvLzwhLS1mcmFtZTAtLT4tLT4nCistLS0tLS0tLQor WW91IGNhbiBzZWUgdGhlIGNvbnRlbnRzIG9mIHRoaXMgZmlsZS4KSW5kZXg6IExheW91dFRlc3Rz L2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzLURFTklFRC1hc3NpZ24tbG9jYXRpb24taHJlZi1qYXZh c2NyaXB0Lmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0 eS94c3MtREVOSUVELWFzc2lnbi1sb2NhdGlvbi1ocmVmLWphdmFzY3JpcHQuaHRtbAkocmV2aXNp b24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkveHNzLURFTklFRC1hc3Np Z24tbG9jYXRpb24taHJlZi1qYXZhc2NyaXB0Lmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEs MTYgQEAKKzxodG1sPgorPHNjcmlwdD4KK2lmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xsZXIp IHsKKyAgbGF5b3V0VGVzdENvbnRyb2xsZXIuZHVtcEFzVGV4dCgpOworICBsYXlvdXRUZXN0Q29u dHJvbGxlci5kdW1wQ2hpbGRGcmFtZXNBc1RleHQoKTsKK30KKworZnVuY3Rpb24gcnVuVGVzdCgp IHsKKyAgZnJhbWVzWzBdLmxvY2F0aW9uLmhyZWYgPSAnamF2YXNjcmlwdDozJzsgCit9CisKKzwv c2NyaXB0PgorPGJvZHkgb25sb2FkPSJydW5UZXN0KCkiPgorPGlmcmFtZSBzcmM9Imh0dHA6Ly9s b2NhbGhvc3Q6ODAwMC9zZWN1cml0eS9yZXNvdXJjZXMvbG9jYWxQYWdlLmh0bWwiPjwvaWZyYW1l PgorPC9ib2R5PgorPC9odG1sPgo=