<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>93140</bug_id>
          
          <creation_ts>2012-08-03 10:42:50 -0700</creation_ts>
          <short_desc>BindingSecurity::shouldAllowAccessToNode shouldn&apos;t detour through Frame to find the node&apos;s document</short_desc>
          <delta_ts>2012-08-04 01:13:33 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>75793</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Adam Barth">abarth</reporter>
          <assigned_to name="Adam Barth">abarth</assigned_to>
          <cc>arv</cc>
    
    <cc>eric</cc>
    
    <cc>haraken</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>686934</commentid>
    <comment_count>0</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-08-03 10:42:50 -0700</bug_when>
    <thetext>BindingSecurity::shouldAllowAccessToNode shouldn&apos;t detour through Frame to find the node&apos;s document</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>686946</commentid>
    <comment_count>1</comment_count>
      <attachid>156415</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-08-03 10:48:43 -0700</bug_when>
    <thetext>Created attachment 156415
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>687098</commentid>
    <comment_count>2</comment_count>
      <attachid>156415</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-08-03 13:29:29 -0700</bug_when>
    <thetext>Comment on attachment 156415
Patch

OK.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>687421</commentid>
    <comment_count>3</comment_count>
      <attachid>156415</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-08-04 01:13:29 -0700</bug_when>
    <thetext>Comment on attachment 156415
Patch

Clearing flags on attachment: 156415

Committed r124695: &lt;http://trac.webkit.org/changeset/124695&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>687422</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-08-04 01:13:33 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>156415</attachid>
            <date>2012-08-03 10:48:43 -0700</date>
            <delta_ts>2012-08-04 01:13:28 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-93140-20120803104823.patch</filename>
            <type>text/plain</type>
            <size>3348</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTI0NjIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>