58012 2011-04-06 22:41:44 -0700 script-src should block inline script 2011-04-07 03:04:35 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Other OS X 10.5 RESOLVED FIXED P2 Normal --- 53572 1 abarth abarth commit-queue eric oldest_to_newest 381134 0 abarth 2011-04-06 22:41:44 -0700 script-src should block inline script 381137 1 88577 abarth 2011-04-06 22:44:09 -0700 Created attachment 88577 Patch 381201 2 88577 eric 2011-04-07 02:50:16 -0700 Comment on attachment 88577 Patch OK. 381208 3 88577 abarth 2011-04-07 03:04:28 -0700 Comment on attachment 88577 Patch Clearing flags on attachment: 88577 Committed r83159: <http://trac.webkit.org/changeset/83159> 381209 4 abarth 2011-04-07 03:04:35 -0700 All reviewed patches have been landed. Closing bug. 88577 2011-04-06 22:44:09 -0700 2011-04-07 03:04:28 -0700 Patch bug-58012-20110406224408.patch text/plain 7119 abarth U3VidmVyc2lvbiBSZXZpc2lvbjogODMxNDEKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5n ZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxvZwppbmRleCBlNGJlZjViODViYjE3NzI3MGYwNThj OGUxMjZiMWE1ZTQ5NzkyMDczLi43NTI0ZjI0OWU1OTJiNTc3N2VhZmMyYWM5YzAwYWY2NmE0NjNm ODZlIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKKysrIGIvTGF5b3V0VGVzdHMv Q2hhbmdlTG9nCkBAIC0xLDUgKzEsMjAgQEAKIDIwMTEtMDQtMDYgIEFkYW0gQmFydGggIDxhYmFy dGhAd2Via2l0Lm9yZz4KIAorICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKwor ICAgICAgICBzY3JpcHQtc3JjIHNob3VsZCBibG9jayBpbmxpbmUgc2NyaXB0CisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD01ODAxMgorCisgICAgICAgIFRl c3QgdGhhdCBzY3JpcHQtc3JjIGJsb2NrcyBpbmxpbmUgc2NyaXB0LiAgVGhpcyB0ZXN0IHVzZXMg YSBkaWZmZXJlbnQKKyAgICAgICAgYXBwcm9hY2ggdGhhbiB0aGUgZXhpc3RpbmcgdGVzdHMgZm9y IHZhcmlldHkuCisKKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0 eVBvbGljeS9pbmxpbmUtc2NyaXB0LWJsb2NrZWQtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAg ICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9pbmxpbmUtc2Ny aXB0LWJsb2NrZWQuaHRtbDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS9j b250ZW50U2VjdXJpdHlQb2xpY3kvcmVzb3VyY2VzL2RvY3VtZW50LXdyaXRlLWFsZXJ0LWZhaWwu anM6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5 UG9saWN5L3Jlc291cmNlcy9kdW1wLWFzLXRleHQuanM6IEFkZGVkLgorCisyMDExLTA0LTA2ICBB ZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CisKICAgICAgICAgUmV2aWV3ZWQgYnkgRXJp YyBTZWlkZWwuCiAKICAgICAgICAgQ1NQIG9iamVjdC1zcmMgc2hvdWxkIGJsb2NrIHBsdWdpbiBs b2FkcwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9jb250ZW50 U2VjdXJpdHlQb2xpY3kvaW5saW5lLXNjcmlwdC1ibG9ja2VkLWV4cGVjdGVkLnR4dCBiL0xheW91 dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L2lubGluZS1z Y3JpcHQtYmxvY2tlZC1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uNzZlNTYxZDUwYTNkMDBkNjVm ZjlkZWYyODk0NjljMmNkNDAxZmNiMwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2h0 dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L2lubGluZS1zY3JpcHQtYmxv Y2tlZC1leHBlY3RlZC50eHQKQEAgLTAsMCArMSBAQAorVGhpcyB0ZXN0IHBhc3NlcyBpZiBpdCBk b2Vzbid0IGFsZXJ0IGZhaWwuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3Nl Y3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9pbmxpbmUtc2NyaXB0LWJsb2NrZWQuaHRtbCBi L0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L2lu bGluZS1zY3JpcHQtYmxvY2tlZC5odG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjFkYmFkZWYyMzkwY2VlMmI0NGYz ZDdiMGI4MWU2MDVkZGYyNzRmMDIKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9odHRw L3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9pbmxpbmUtc2NyaXB0LWJsb2Nr ZWQuaHRtbApAQCAtMCwwICsxLDE0IEBACis8IURPQ1RZUEUgaHRtbD4KKzxodG1sPgorPGhlYWQ+ Cis8bWV0YSBodHRwLWVxdWl2PSJYLVdlYktpdC1DU1AiIGNvbnRlbnQ9InNjcmlwdC1zcmMgaHR0 cDovLzEyNy4wLjAuMToqIj4KKzxzY3JpcHQgc3JjPSJyZXNvdXJjZXMvZHVtcC1hcy10ZXh0Lmpz Ij48L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5PgorVGhpcyB0ZXN0IHBhc3NlcyBpZiBpdCBkb2Vz bid0IGFsZXJ0IGZhaWwuCis8c2NyaXB0PgorYWxlcnQoJ0ZBSUwnKTsKKzwvc2NyaXB0PgorPHNj cmlwdCBzcmM9InJlc291cmNlcy9kb2N1bWVudC13cml0ZS1hbGVydC1mYWlsLmpzIj48L3Njcmlw dD4KKzwvYm9keT4KKzwvaHRtbD4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L3Jlc291cmNlcy9kb2N1bWVudC13cml0ZS1h bGVydC1mYWlsLmpzIGIvTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9jb250ZW50U2Vj dXJpdHlQb2xpY3kvcmVzb3VyY2VzL2RvY3VtZW50LXdyaXRlLWFsZXJ0LWZhaWwuanMKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMC4uNzQ1OWY1Y2U1MjZmOWVjOWExOWZhNDkwNjNlMGU4YTNhMzczNmYxMAotLS0gL2Rldi9u dWxsCisrKyBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5 UG9saWN5L3Jlc291cmNlcy9kb2N1bWVudC13cml0ZS1hbGVydC1mYWlsLmpzCkBAIC0wLDAgKzEg QEAKK2RvY3VtZW50LndyaXRlKCI8c2NyaXB0PmFsZXJ0KCdGQUlMJyk8L3NjcmlwdD4iKTsKZGlm ZiAtLWdpdCBhL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5 UG9saWN5L3Jlc291cmNlcy9kdW1wLWFzLXRleHQuanMgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3Rz L3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9yZXNvdXJjZXMvZHVtcC1hcy10ZXh0Lmpz Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAuLmUzY2Y1ZTRjZmE2Y2UwNzcxOWEzZDQ2YTJiZDQ3ZWRlNmNjN2UyMDMKLS0t IC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRT ZWN1cml0eVBvbGljeS9yZXNvdXJjZXMvZHVtcC1hcy10ZXh0LmpzCkBAIC0wLDAgKzEsMiBAQAor aWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICBsYXlvdXRUZXN0Q29udHJvbGxl ci5kdW1wQXNUZXh0KCk7CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cgYi9T b3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNzVjZTA0OTU3NTk1NjIxMWRlY2JiMjQyMTIy ZWViYWQ3ZDM4YTNhNS4uNWU2ZWFkOTIzOTlkN2QxZTllNjVkZjAzZDAwNDljOWQwZTU3YzU2YyAx MDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9XZWJDb3Jl L0NoYW5nZUxvZwpAQCAtMSw1ICsxLDI4IEBACiAyMDExLTA0LTA2ICBBZGFtIEJhcnRoICA8YWJh cnRoQHdlYmtpdC5vcmc+CiAKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgc2NyaXB0LXNyYyBzaG91bGQgYmxvY2sgaW5saW5lIHNjcmlwdAorICAgICAgICBo dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NTgwMTIKKworICAgICAgICBC bG9jayBpbmxpbmUgc2NyaXB0cyBhdCB0aGUgU2NyaXB0RWxlbWVudCBsYXllci4gIFRoaXMgc2hv dWxkIGNhdGNoCisgICAgICAgIGV4YWN0bHkgdGhlIHNjcmlwdHMgd2Ugd2FudCB0byBjYXRjaC4K KworICAgICAgICBUZXN0OiBodHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGlj eS9pbmxpbmUtc2NyaXB0LWJsb2NrZWQuaHRtbAorCisgICAgICAgICogZG9tL0RvY3VtZW50LmNw cDoKKyAgICAgICAgKFdlYkNvcmU6OkRvY3VtZW50Ojpwcm9jZXNzSHR0cEVxdWl2KToKKyAgICAg ICAgICAgIC0gVGhpcyBwYXRjaCBhbHNvIGFkZHMgdGhlIGFiaWxpdHkgdG8gc3VwcGx5IGEgQ1NQ IHBvbGljeSB2aWEgYQorICAgICAgICAgICAgICA8bWV0YT4gdGFnLiAgV2UnbGwgdXBkYXRlIHRo ZSBuYW1lIG9mIHRoZSBoZWFkZXIgb25jZSB3ZSd2ZQorICAgICAgICAgICAgICBmaW5pc2hlZCBp bXBsZW1lbnRpbmcgdGhlIHNwZWMuCisgICAgICAgICogZG9tL1NjcmlwdEVsZW1lbnQuY3BwOgor ICAgICAgICAoV2ViQ29yZTo6U2NyaXB0RWxlbWVudDo6ZXhlY3V0ZVNjcmlwdCk6CisgICAgICAg ICogcGFnZS9Db250ZW50U2VjdXJpdHlQb2xpY3kuY3BwOgorICAgICAgICAoV2ViQ29yZTo6Q29u dGVudFNlY3VyaXR5UG9saWN5OjphbGxvd0lubGluZVNjcmlwdCk6CisgICAgICAgICogcGFnZS9D b250ZW50U2VjdXJpdHlQb2xpY3kuaDoKKworMjAxMS0wNC0wNiAgQWRhbSBCYXJ0aCAgPGFiYXJ0 aEB3ZWJraXQub3JnPgorCiAgICAgICAgIFJldmlld2VkIGJ5IEVyaWMgU2VpZGVsLgogCiAgICAg ICAgIENTUCBvYmplY3Qtc3JjIHNob3VsZCBibG9jayBwbHVnaW4gbG9hZHMKZGlmZiAtLWdpdCBh L1NvdXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9kb20vRG9j dW1lbnQuY3BwCmluZGV4IDI2NDVkOGM3NjMxMTE5MzVjY2Q0YThkZDJhOTU4ZmE2ZDg3YzVkMjEu LmRmN2E5OWQzZTdmYjRhMDA2MDhlMTFkNDg5OTcwODFhMGVjNWVlYjQgMTAwNjQ0Ci0tLSBhL1Nv dXJjZS9XZWJDb3JlL2RvbS9Eb2N1bWVudC5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvZG9tL0Rv Y3VtZW50LmNwcApAQCAtMjY0MCw3ICsyNjQwLDggQEAgdm9pZCBEb2N1bWVudDo6cHJvY2Vzc0h0 dHBFcXVpdihjb25zdCBTdHJpbmcmIGVxdWl2LCBjb25zdCBTdHJpbmcmIGNvbnRlbnQpCiAgICAg ICAgICAgICAgICAgZnJhbWUtPmRvbVdpbmRvdygpLT5jb25zb2xlKCktPmFkZE1lc3NhZ2UoSlNN ZXNzYWdlU291cmNlLCBMb2dNZXNzYWdlVHlwZSwgRXJyb3JNZXNzYWdlTGV2ZWwsIGNvbnNvbGVN ZXNzYWdlLCAxLCBTdHJpbmcoKSk7CiAgICAgICAgICAgICB9CiAgICAgICAgIH0KLSAgICB9Cisg ICAgfSBlbHNlIGlmIChlcXVhbElnbm9yaW5nQ2FzZShlcXVpdiwgIngtd2Via2l0LWNzcCIpKQor ICAgICAgICBjb250ZW50U2VjdXJpdHlQb2xpY3koKS0+ZGlkUmVjZWl2ZUhlYWRlcihjb250ZW50 KTsKIH0KIAogLy8gVGhvdWdoIGlzc3BhY2UoKSBjb25zaWRlcnMgXHQgYW5kIFx2IHRvIGJlIHdo aXRlc3BhY2UsIFdpbiBJRSBkb2Vzbid0LgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvZG9t L1NjcmlwdEVsZW1lbnQuY3BwIGIvU291cmNlL1dlYkNvcmUvZG9tL1NjcmlwdEVsZW1lbnQuY3Bw CmluZGV4IDlhMDdiYjgxYTU3MzdlMDAxMjdmZDY3ZjFjNzFkMWRiNDFkODY3OGYuLjVkZDZiN2Qx YTNiM2QzNzNmZTBkOGQ1NDE2YmM2NmNiNGM3ZGI0MDAgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJD b3JlL2RvbS9TY3JpcHRFbGVtZW50LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9kb20vU2NyaXB0 RWxlbWVudC5jcHAKQEAgLTI1Nyw2ICsyNTcsOSBAQCB2b2lkIFNjcmlwdEVsZW1lbnQ6OmV4ZWN1 dGVTY3JpcHQoY29uc3QgU2NyaXB0U291cmNlQ29kZSYgc291cmNlQ29kZSkKICAgICBpZiAoc291 cmNlQ29kZS5pc0VtcHR5KCkpCiAgICAgICAgIHJldHVybjsKIAorICAgIGlmICghbV9pc0V4dGVy bmFsU2NyaXB0ICYmICFtX2VsZW1lbnQtPmRvY3VtZW50KCktPmNvbnRlbnRTZWN1cml0eVBvbGlj eSgpLT5hbGxvd0lubGluZVNjcmlwdCgpKQorICAgICAgICByZXR1cm47CisKICAgICBSZWZQdHI8 RG9jdW1lbnQ+IGRvY3VtZW50ID0gbV9lbGVtZW50LT5kb2N1bWVudCgpOwogICAgIEFTU0VSVChk b2N1bWVudCk7CiAgICAgaWYgKEZyYW1lKiBmcmFtZSA9IGRvY3VtZW50LT5mcmFtZSgpKSB7CmRp ZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9wYWdlL0NvbnRlbnRTZWN1cml0eVBvbGljeS5jcHAg Yi9Tb3VyY2UvV2ViQ29yZS9wYWdlL0NvbnRlbnRTZWN1cml0eVBvbGljeS5jcHAKaW5kZXggNzJm ODBlYTQzOTFlODI5M2Y1OTY0ZTdlODY4NWJhNmVjZmJmZjkwMS4uYjg5ODlhZmEzNmZiMTVhOTlk NTExZDE4YTRhMzBmYTIxNzA5OTUwNyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcGFnZS9D b250ZW50U2VjdXJpdHlQb2xpY3kuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BhZ2UvQ29udGVu dFNlY3VyaXR5UG9saWN5LmNwcApAQCAtNDM1LDYgKzQzNSwxMSBAQCBib29sIENvbnRlbnRTZWN1 cml0eVBvbGljeTo6YWxsb3dJbmxpbmVFdmVudEhhbmRsZXJzKCkgY29uc3QKICAgICByZXR1cm4g IW1fc2NyaXB0U3JjOwogfQogCitib29sIENvbnRlbnRTZWN1cml0eVBvbGljeTo6YWxsb3dJbmxp bmVTY3JpcHQoKSBjb25zdAoreworICAgIHJldHVybiAhbV9zY3JpcHRTcmM7Cit9CisKIGJvb2wg Q29udGVudFNlY3VyaXR5UG9saWN5OjphbGxvd1NjcmlwdEZyb21Tb3VyY2UoY29uc3QgS1VSTCYg dXJsKSBjb25zdAogewogICAgIHJldHVybiAhbV9zY3JpcHRTcmMgfHwgbV9zY3JpcHRTcmMtPmFs bG93cyh1cmwpOwpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvcGFnZS9Db250ZW50U2VjdXJp dHlQb2xpY3kuaCBiL1NvdXJjZS9XZWJDb3JlL3BhZ2UvQ29udGVudFNlY3VyaXR5UG9saWN5LmgK aW5kZXggYTQ3YmRkNjg3Y2RmZWZlNjFlZWJiYWM2MDUwNTU1MzFmMzllMzEzOC4uNzUwYTQ0M2Qy ZmMxZDY4MTM2YjdiOTNjOGQ3YzliMTMwZWNhZDI0NSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNv cmUvcGFnZS9Db250ZW50U2VjdXJpdHlQb2xpY3kuaAorKysgYi9Tb3VyY2UvV2ViQ29yZS9wYWdl L0NvbnRlbnRTZWN1cml0eVBvbGljeS5oCkBAIC00Nyw2ICs0Nyw3IEBAIHB1YmxpYzoKIAogICAg IGJvb2wgYWxsb3dKYXZhU2NyaXB0VVJMcygpIGNvbnN0OwogICAgIGJvb2wgYWxsb3dJbmxpbmVF dmVudEhhbmRsZXJzKCkgY29uc3Q7CisgICAgYm9vbCBhbGxvd0lubGluZVNjcmlwdCgpIGNvbnN0 OwogICAgIGJvb2wgYWxsb3dTY3JpcHRGcm9tU291cmNlKGNvbnN0IEtVUkwmKSBjb25zdDsKICAg ICBib29sIGFsbG93T2JqZWN0RnJvbVNvdXJjZShjb25zdCBLVVJMJikgY29uc3Q7CiAK