53444 2011-01-31 12:16:59 -0800 Propagate parent document security origin to newly create Document XML response 2011-02-01 06:35:27 -0800 1 1 1 Unclassified WebKit WebCore Misc. 528+ (Nightly build) All All RESOLVED FIXED P2 Normal --- 1 antonm antonm commit-queue sam oldest_to_newest 342735 0 antonm 2011-01-31 12:16:59 -0800 Propagate parent document security origin to newly create Document XML response 342737 1 80670 antonm 2011-01-31 12:21:15 -0800 Created attachment 80670 Patch 342799 2 80670 abarth 2011-01-31 14:00:01 -0800 Comment on attachment 80670 Patch This is tricky. The problem is that responseXML can be from a cross-origin XMLHttpRequest. This should be ok, because the DOM nodes created in this way really "belong" to the requester (that's more or less what CORS says). I'm not really sure how to test this change. 342800 3 abarth 2011-01-31 14:00:11 -0800 +sam 342802 4 80670 abarth 2011-01-31 14:01:23 -0800 Comment on attachment 80670 Patch I think this is reasonable. We might want to give Sam a chance to give us his opinion. (Bug 53440 has some more context.) 342961 5 sam 2011-01-31 18:56:05 -0800 This seems reasonable to me. 343139 6 80670 antonm 2011-02-01 04:36:19 -0800 Comment on attachment 80670 Patch Thanks a lot, Adam and Sam. 343192 7 80670 commit-queue 2011-02-01 06:35:22 -0800 Comment on attachment 80670 Patch Clearing flags on attachment: 80670 Committed r77246: <http://trac.webkit.org/changeset/77246> 343193 8 commit-queue 2011-02-01 06:35:27 -0800 All reviewed patches have been landed. Closing bug. 80670 2011-01-31 12:21:15 -0800 2011-02-01 06:35:22 -0800 Patch bug-53444-20110131232113.patch text/plain 1402 antonm ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZwppbmRleCA0MzIyYWEyOTI0NzFhMmJjNDZhMzQ5ZDc0ZmY4OTJjOThjMWRhY2FiLi44 YzlkMmFiNGEzODFhMWQ0ODM1MmQ2MjgyNWRlOTJjODMyZDkyZGM0IDEwMDY0NAotLS0gYS9Tb3Vy Y2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0x LDMgKzEsMTUgQEAKKzIwMTEtMDEtMzEgIEFudG9uIE11aGluICA8YW50b25tQGNocm9taXVtLm9y Zz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBQcm9w YWdhdGUgcGFyZW50IGRvY3VtZW50IHNlY3VyaXR5IG9yaWdpbiB0byBuZXdseSBjcmVhdGUgRG9j dW1lbnQgWE1MIHJlc3BvbnNlCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD01MzQ0NAorCisgICAgICAgIENvdmVyZWQgYnkgdGhlIGV4aXN0aW5nIHRlc3Rz LgorCisgICAgICAgICogeG1sL1hNTEh0dHBSZXF1ZXN0LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6 OlhNTEh0dHBSZXF1ZXN0OjpyZXNwb25zZVhNTCk6CisKIDIwMTEtMDEtMzEgIEFiaGlzaGVrIEFy eWEgIDxpbmZlcm5vQGNocm9taXVtLm9yZz4KIAogICAgICAgICBSZXZpZXdlZCBieSBEaW1pdHJp IEdsYXprb3YuCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS94bWwvWE1MSHR0cFJlcXVlc3Qu Y3BwIGIvU291cmNlL1dlYkNvcmUveG1sL1hNTEh0dHBSZXF1ZXN0LmNwcAppbmRleCA0YWQ2YjE3 MzM4NTUxMTZhM2RhYTE2ZjZiM2NiOTk3OWI5ZTY1ZWY5Li4zZTZlMGE5NGFkNzM4MmQ5MjgyZGE2 NTA3Y2YzNzJmMWUzMjJlYzlhIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS94bWwvWE1MSHR0 cFJlcXVlc3QuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3htbC9YTUxIdHRwUmVxdWVzdC5jcHAK QEAgLTI0OSw2ICsyNDksNyBAQCBEb2N1bWVudCogWE1MSHR0cFJlcXVlc3Q6OnJlc3BvbnNlWE1M KEV4Y2VwdGlvbkNvZGUmIGVjKQogICAgICAgICAgICAgbV9yZXNwb25zZVhNTCA9IERvY3VtZW50 OjpjcmVhdGUoMCwgbV91cmwpOwogICAgICAgICAgICAgLy8gRklYTUU6IFNldCBMYXN0LU1vZGlm aWVkLgogICAgICAgICAgICAgbV9yZXNwb25zZVhNTC0+c2V0Q29udGVudChtX3Jlc3BvbnNlQnVp bGRlci50b1N0cmluZ1ByZXNlcnZlQ2FwYWNpdHkoKSk7CisgICAgICAgICAgICBtX3Jlc3BvbnNl WE1MLT5zZXRTZWN1cml0eU9yaWdpbihkb2N1bWVudCgpLT5zZWN1cml0eU9yaWdpbigpKTsKICAg ICAgICAgICAgIGlmICghbV9yZXNwb25zZVhNTC0+d2VsbEZvcm1lZCgpKQogICAgICAgICAgICAg ICAgIG1fcmVzcG9uc2VYTUwgPSAwOwogICAgICAgICB9Cg==