77849 2012-02-05 21:41:51 -0800 xss-DENIED-from-data-url-in-foreign-domain-subframe.html is flaky 2012-02-06 15:04:15 -0800 1 1 1 Unclassified WebKit Tools / Tests 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 abarth abarth ap eric webkit.review.bot oldest_to_newest 549719 0 abarth 2012-02-05 21:41:51 -0800 xss-DENIED-from-data-url-in-foreign-domain-subframe.html is flaky 549721 1 125566 abarth 2012-02-05 21:44:49 -0800 Created attachment 125566 Patch 549724 2 abarth 2012-02-05 21:55:16 -0800 Committed r106774: <http://trac.webkit.org/changeset/106774> 550321 3 ap 2012-02-06 15:00:51 -0800 This test appears pretty simple. Was there actually a race condition in it, or is the problem in WebCore? 550325 4 abarth 2012-02-06 15:04:15 -0800 > This test appears pretty simple. Was there actually a race condition in it, or is the problem in WebCore? There's actually a race condition. Notice that before this patch <p id='accessMe'> was below the <iframe>, but the iframe assumed that the accessMe id already existed in the document. 125566 2012-02-05 21:44:49 -0800 2012-02-05 21:53:32 -0800 Patch bug-77849-20120205214448.patch text/plain 7125 abarth SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDEwNjc3MykKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwkod29y a2luZyBjb3B5KQpAQCAtMSwzICsxLDIwIEBACisyMDEyLTAyLTA1ICBBZGFtIEJhcnRoICA8YWJh cnRoQHdlYmtpdC5vcmc+CisKKyAgICAgICAgeHNzLURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZv cmVpZ24tZG9tYWluLXN1YmZyYW1lLmh0bWwgaXMgZmxha3kKKyAgICAgICAgaHR0cHM6Ly9idWdz LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTc3ODQ5CisKKyAgICAgICAgUmV2aWV3ZWQgYnkg Tk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVGhpcyB0ZXN0IGRvZXNuJ3Qgc2VlbSB0byBiZSBz ZXF1ZW5jZWQgY29ycmVjdGx5IHcuci50LiB0aGUgbG9hZCBldmVudHMKKyAgICAgICAgb2YgdGhl IHZhcmlvdXMgZnJhbWVzIGludm9sdmVkLiAgVGhpcyBwYXRjaCByZS1vcmRlcnMgc29tZSBvZiB0 aGUKKyAgICAgICAgdHJpZ2dlcnMgaW4gdGhlIGhvcGVzIG9mIG1ha2luZyB0aGUgdGVzdCBubyBs b25nZXIgZmxha3kuCisKKyAgICAgICAgKiBodHRwL3Rlc3RzL3NlY3VyaXR5L2RhdGFVUkwvcmVz b3VyY2VzL2ZvcmVpZ24tZG9tYWluLWRhdGEtdXJsLWFjY2Vzc29yLWlmcmFtZS5odG1sOgorICAg ICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkvZGF0YVVSTC94c3MtREVOSUVELWZyb20tZGF0YS11 cmwtaW4tZm9yZWlnbi1kb21haW4tc3ViZnJhbWUtZXhwZWN0ZWQudHh0OgorICAgICAgICAqIGh0 dHAvdGVzdHMvc2VjdXJpdHkvZGF0YVVSTC94c3MtREVOSUVELWZyb20tZGF0YS11cmwtaW4tZm9y ZWlnbi1kb21haW4tc3ViZnJhbWUuaHRtbDoKKyAgICAgICAgKiBwbGF0Zm9ybS9jaHJvbWl1bS9o dHRwL3Rlc3RzL3NlY3VyaXR5L2RhdGFVUkwveHNzLURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZv cmVpZ24tZG9tYWluLXN1YmZyYW1lLWV4cGVjdGVkLnR4dDoKKyAgICAgICAgKiBwbGF0Zm9ybS9j aHJvbWl1bS90ZXN0X2V4cGVjdGF0aW9ucy50eHQ6CisKIDIwMTItMDItMDUgIEFiaGlzaGVrIEFy eWEgIDxpbmZlcm5vQGNocm9taXVtLm9yZz4KIAogICAgICAgICBDcmFzaCBpbiBGb3JtU3VibWlz c2lvbjo6Y3JlYXRlLgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9kYXRh VVJML3hzcy1ERU5JRUQtZnJvbS1kYXRhLXVybC1pbi1mb3JlaWduLWRvbWFpbi1zdWJmcmFtZS1l eHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0 eS9kYXRhVVJML3hzcy1ERU5JRUQtZnJvbS1kYXRhLXVybC1pbi1mb3JlaWduLWRvbWFpbi1zdWJm cmFtZS1leHBlY3RlZC50eHQJKHJldmlzaW9uIDEwNjc2MSkKKysrIExheW91dFRlc3RzL2h0dHAv dGVzdHMvc2VjdXJpdHkvZGF0YVVSTC94c3MtREVOSUVELWZyb20tZGF0YS11cmwtaW4tZm9yZWln bi1kb21haW4tc3ViZnJhbWUtZXhwZWN0ZWQudHh0CSh3b3JraW5nIGNvcHkpCkBAIC0zLDkgKzMs MTAgQEAgQ09OU09MRSBNRVNTQUdFOiBVbnNhZmUgSmF2YVNjcmlwdCBhdHRlbQogQUxFUlQ6IFBB U1M6IEV4Y2VwdGlvbiB0aHJvd24gc3VjY2Vzc2Z1bGx5LgogVGhlIHNjZW5hcmlvIGZvciB0aGlz IHRlc3QgaXMgdGhhdCB5b3UgaGF2ZSBhbiBpZnJhbWUgd2l0aCBjb250ZW50IGZyb20gYSBmb3Jl aWduIGRvbWFpbi4gSW4gdGhhdCBmb3JlaWduIGNvbnRlbnQgaXMgYW4gaWZyYW1lIHdoaWNoIGxv YWRzIGEgZGF0YTogVVJMLiBUaGlzIHRlc3RzIHRoYXQgdGhlIGRhdGE6IFVSTCBsb2FkZWQgaWZy YW1lIGRvZXMgbm90IGhhdmUgYWNjZXNzIHRvIHRoZSBtYWluIGZyYW1lIHVzaW5nIHRvcC5kb2N1 bWVudC4KIAotCiBQYXNzOiBDcm9zcyBmcmFtZSBhY2Nlc3MgZnJvbSBhIGRhdGE6IFVSTCBvbiBh IGRpZmZlcmVudCBkb21haW4gd2FzIGRlbmllZC4KIAorCisKIC0tLS0tLS0tCiBGcmFtZTogJ2FG cmFtZScKIC0tLS0tLS0tCkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Rh dGFVUkwveHNzLURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZvcmVpZ24tZG9tYWluLXN1YmZyYW1l Lmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9kYXRh VVJML3hzcy1ERU5JRUQtZnJvbS1kYXRhLXVybC1pbi1mb3JlaWduLWRvbWFpbi1zdWJmcmFtZS5o dG1sCShyZXZpc2lvbiAxMDY3NjEpCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5 L2RhdGFVUkwveHNzLURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZvcmVpZ24tZG9tYWluLXN1YmZy YW1lLmh0bWwJKHdvcmtpbmcgY29weSkKQEAgLTEsMjEgKzEsMTggQEAKIDxodG1sPgogPGhlYWQ+ Ci0gICAgPHNjcmlwdD4KLSAgICAgICAgd2luZG93Lm9ubG9hZCA9IGZ1bmN0aW9uKCkKLSAgICAg ICAgewotICAgICAgICAgICAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikgewotICAg ICAgICAgICAgICAgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKLSAgICAgICAg ICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQ2hpbGRGcmFtZXNBc1RleHQoKTsKLSAg ICAgICAgICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci53YWl0VW50aWxEb25lKCk7Ci0gICAg ICAgICAgICB9Ci0gICAgICAgIH0KLSAgICA8L3NjcmlwdD4KKzxzY3JpcHQ+CitpZiAod2luZG93 LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgICAgbGF5b3V0VGVzdENvbnRyb2xsZXIuZHVtcEFz VGV4dCgpOworICAgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBDaGlsZEZyYW1lc0FzVGV4dCgp OworICAgIGxheW91dFRlc3RDb250cm9sbGVyLndhaXRVbnRpbERvbmUoKTsKK30KKzwvc2NyaXB0 PgogPC9oZWFkPgogPGJvZHk+CiAgICAgPHA+VGhlIHNjZW5hcmlvIGZvciB0aGlzIHRlc3QgaXMg dGhhdCB5b3UgaGF2ZSBhbiBpZnJhbWUgd2l0aCBjb250ZW50IGZyb20gYSBmb3JlaWduIGRvbWFp bi4gIEluIHRoYXQgZm9yZWlnbiBjb250ZW50CiAgICAgICAgIGlzIGFuIGlmcmFtZSB3aGljaCBs b2FkcyBhIGRhdGE6IFVSTC4gIFRoaXMgdGVzdHMgdGhhdCB0aGUgZGF0YTogVVJMIGxvYWRlZCBp ZnJhbWUgZG9lcyBub3QgaGF2ZSBhY2Nlc3MKICAgICAgICAgdG8gdGhlIG1haW4gZnJhbWUgdXNp bmcgdG9wLmRvY3VtZW50LjwvcD4KLSAgICA8aWZyYW1lIGlkPSdhRnJhbWUnIHNyYz0iaHR0cDov L2xvY2FsaG9zdDo4MDAwL3NlY3VyaXR5L2RhdGFVUkwvcmVzb3VyY2VzL2ZvcmVpZ24tZG9tYWlu LWRhdGEtdXJsLWFjY2Vzc29yLWlmcmFtZS5odG1sIiBzdHlsZT0id2lkdGg6IDQwMHB4OyBoZWln aHQ6MjAwcHg7Ij48L2lmcmFtZT4KICAgICA8cCBpZD0nYWNjZXNzTWUnPlBhc3M6IENyb3NzIGZy YW1lIGFjY2VzcyBmcm9tIGEgZGF0YTogVVJMIG9uIGEgZGlmZmVyZW50IGRvbWFpbiB3YXMgZGVu aWVkLjwvcD4KKyAgICA8aWZyYW1lIGlkPSdhRnJhbWUnIHNyYz0iaHR0cDovL2xvY2FsaG9zdDo4 MDAwL3NlY3VyaXR5L2RhdGFVUkwvcmVzb3VyY2VzL2ZvcmVpZ24tZG9tYWluLWRhdGEtdXJsLWFj Y2Vzc29yLWlmcmFtZS5odG1sIiBzdHlsZT0id2lkdGg6IDQwMHB4OyBoZWlnaHQ6MjAwcHg7Ij48 L2lmcmFtZT4KIDwvYm9keT4KIDwvaHRtbD4KSW5kZXg6IExheW91dFRlc3RzL2h0dHAvdGVzdHMv c2VjdXJpdHkvZGF0YVVSTC9yZXNvdXJjZXMvZm9yZWlnbi1kb21haW4tZGF0YS11cmwtYWNjZXNz b3ItaWZyYW1lLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1 cml0eS9kYXRhVVJML3Jlc291cmNlcy9mb3JlaWduLWRvbWFpbi1kYXRhLXVybC1hY2Nlc3Nvci1p ZnJhbWUuaHRtbAkocmV2aXNpb24gMTA2NzYxKQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9z ZWN1cml0eS9kYXRhVVJML3Jlc291cmNlcy9mb3JlaWduLWRvbWFpbi1kYXRhLXVybC1hY2Nlc3Nv ci1pZnJhbWUuaHRtbAkod29ya2luZyBjb3B5KQpAQCAtMSw4ICsxLDkgQEAKIDxodG1sPgogPGJv ZHk+Ci0gICAgPHA+SW5uZXIgaWZyYW1lIG9uIGEgZm9yZWlnbiBkb21haW4uPC9wPgotICAgIDxp ZnJhbWUgaWQ9ImFGcmFtZSI+PC9pZnJhbWU+Ci0gICAgPHNjcmlwdD4KKzxwPklubmVyIGlmcmFt ZSBvbiBhIGZvcmVpZ24gZG9tYWluLjwvcD4KKzxpZnJhbWUgaWQ9ImFGcmFtZSI+PC9pZnJhbWU+ Cis8c2NyaXB0PgorICAgIHdpbmRvdy5vbmxvYWQgPSBmdW5jdGlvbigpIHsKICAgICAgICAgdmFy IHVybCA9ICJkYXRhOnRleHQvaHRtbCw8aHRtbD4iCiAgICAgICAgICAgICArICI8aGVhZD4iCiAg ICAgICAgICAgICArICAgICAiPHNjciIgKyAiaXB0PiIKQEAgLTI3LDYgKzI4LDcgQEAKIAogICAg ICAgICB2YXIgZnJhbWUgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYUZyYW1lJyk7CiAgICAg ICAgIGZyYW1lLnNyYyA9IHVybDsKLSAgICA8L3NjcmlwdD4KKyAgICB9OworPC9zY3JpcHQ+CiA8 L2JvZHk+CiA8L2h0bWw+CkluZGV4OiBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9jaHJvbWl1bS90ZXN0 X2V4cGVjdGF0aW9ucy50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvcGxhdGZvcm0vY2hy b21pdW0vdGVzdF9leHBlY3RhdGlvbnMudHh0CShyZXZpc2lvbiAxMDY3NjUpCisrKyBMYXlvdXRU ZXN0cy9wbGF0Zm9ybS9jaHJvbWl1bS90ZXN0X2V4cGVjdGF0aW9ucy50eHQJKHdvcmtpbmcgY29w eSkKQEAgLTc3Miw3ICs3NzIsNiBAQCBCVUdDUjM5NDIzIDogc2VjdXJpdHkvYmxvY2stdGVzdC5o dG1sID0gCiAvLyBGbGFreTogZmFpbHMgYWJvdXQgNSUgb2YgdGhlIHRpbWUuCiBCVUdDUjMxMzQy IFdJTiBSRUxFQVNFIDogc2VjdXJpdHkvYmxvY2stdGVzdC1uby1wb3J0Lmh0bWwgPSBQQVNTIFRF WFQKIAotQlVHQ1I5Nzk4IFJFTEVBU0UgOiBodHRwL3Rlc3RzL3NlY3VyaXR5L2RhdGFVUkwveHNz LURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZvcmVpZ24tZG9tYWluLXN1YmZyYW1lLmh0bWwgPSBQ QVNTIFRJTUVPVVQKIEJVR0NSMjYwNDIgOiBodHRwL3Rlc3RzL3NlY3VyaXR5L21peGVkQ29udGVu dC9pbnNlY3VyZS1wbHVnaW4taW4taWZyYW1lLmh0bWwgPSBQQVNTIFRFWFQKIEJVR1dLNjU1Njcg REVCVUcgOiBodHRwL3Rlc3RzL3NlY3VyaXR5L21peGVkQ29udGVudC9pbnNlY3VyZS1zY3JpcHQt aW4taWZyYW1lLmh0bWwgPSBQQVNTIFRFWFQKIEJVR0NSMjAzNDUgOiBodHRwL3Rlc3RzL3NlY3Vy aXR5L2Nyb3NzLWZyYW1lLWFjY2Vzcy1nZXRPd25Qcm9wZXJ0eURlc2NyaXB0b3IuaHRtbCA9IFRF WFQKQEAgLTc4NSw2ICs3ODQsOSBAQCBCVUdfTEVWSU4gREVCVUcgOiBodHRwL3Rlc3RzL3NlY3Vy aXR5L21pCiBCVUdXSzcwMjk4IDogaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2Nvb2tp ZS1pbmplY3Rpb24uaHRtbCA9IFRFWFQgUEFTUwogQlVHQ1IyNDE4MiBXSU4gUkVMRUFTRSA6IGh0 dHAvdGVzdHMvc2VjdXJpdHkvY3Jvc3Mtb3JpZ2luLWNzcy5odG1sID0gUEFTUyBUSU1FT1VUCiAK Ky8vIEhvcGVmdWxseSBmaXhlZCBmbGFraW5lc3MgKG5lZWQgdG8gdmVyaWZ5IHdpdGggZGFzaGJv YXJkKS4KK0JVR0NSOTc5OCBSRUxFQVNFIDogaHR0cC90ZXN0cy9zZWN1cml0eS9kYXRhVVJML3hz cy1ERU5JRUQtZnJvbS1kYXRhLXVybC1pbi1mb3JlaWduLWRvbWFpbi1zdWJmcmFtZS5odG1sID0g UEFTUyBUSU1FT1VUCisKIC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAvLyBQbHVnaW4gdGVzdHMKIC8vIC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t CkluZGV4OiBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9jaHJvbWl1bS9odHRwL3Rlc3RzL3NlY3VyaXR5 L2RhdGFVUkwveHNzLURFTklFRC1mcm9tLWRhdGEtdXJsLWluLWZvcmVpZ24tZG9tYWluLXN1YmZy YW1lLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9jaHJv bWl1bS9odHRwL3Rlc3RzL3NlY3VyaXR5L2RhdGFVUkwveHNzLURFTklFRC1mcm9tLWRhdGEtdXJs LWluLWZvcmVpZ24tZG9tYWluLXN1YmZyYW1lLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMTA2NzYx KQorKysgTGF5b3V0VGVzdHMvcGxhdGZvcm0vY2hyb21pdW0vaHR0cC90ZXN0cy9zZWN1cml0eS9k YXRhVVJML3hzcy1ERU5JRUQtZnJvbS1kYXRhLXVybC1pbi1mb3JlaWduLWRvbWFpbi1zdWJmcmFt ZS1leHBlY3RlZC50eHQJKHdvcmtpbmcgY29weSkKQEAgLTMsOSArMywxMCBAQCBDT05TT0xFIE1F U1NBR0U6IFVuc2FmZSBKYXZhU2NyaXB0IGF0dGVtCiBBTEVSVDogUEFTUzogRXhjZXB0aW9uIHRo cm93biBzdWNjZXNzZnVsbHkuCiBUaGUgc2NlbmFyaW8gZm9yIHRoaXMgdGVzdCBpcyB0aGF0IHlv dSBoYXZlIGFuIGlmcmFtZSB3aXRoIGNvbnRlbnQgZnJvbSBhIGZvcmVpZ24gZG9tYWluLiBJbiB0 aGF0IGZvcmVpZ24gY29udGVudCBpcyBhbiBpZnJhbWUgd2hpY2ggbG9hZHMgYSBkYXRhOiBVUkwu IFRoaXMgdGVzdHMgdGhhdCB0aGUgZGF0YTogVVJMIGxvYWRlZCBpZnJhbWUgZG9lcyBub3QgaGF2 ZSBhY2Nlc3MgdG8gdGhlIG1haW4gZnJhbWUgdXNpbmcgdG9wLmRvY3VtZW50LgogCi0KIFBhc3M6 IENyb3NzIGZyYW1lIGFjY2VzcyBmcm9tIGEgZGF0YTogVVJMIG9uIGEgZGlmZmVyZW50IGRvbWFp biB3YXMgZGVuaWVkLgogCisKKwogLS0tLS0tLS0KIEZyYW1lOiAnYUZyYW1lJwogLS0tLS0tLS0K