Bug 128889 (CVE-2014-1309)

Summary:

Ensure that removing an iframe from the DOM tree disconnects its Frame.

Product:

WebKit

Reporter:

Andreas Kling <kling>

Component:

Frames

Assignee:

Andreas Kling <kling>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

chai, commit-queue, esprehn+autocc, gyuyoung.kim, kling, rniwa

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	commit-queue: commit-queue-

Description Andreas Kling 2014-02-16 16:22:46 PST

Merge https://src.chromium.org/viewvc/blink?revision=156174&view=revision

Comment 1 Andreas Kling 2014-02-16 16:23:06 PST

<rdar://problem/15671221>

Comment 2 Andreas Kling 2014-02-16 16:25:08 PST

Created attachment 224325 [details]
Patch

Comment 3 WebKit Commit Bot 2014-02-16 17:30:37 PST

Comment on attachment 224325 [details]
Patch

Rejecting attachment 224325 [details] from commit-queue.

Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.appspot.com', '--bot-id=webkit-cq-03', 'validate-changelog', '--check-oops', '--non-interactive', 224325, '--port=mac']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit

/Volumes/Data/EWS/WebKit/LayoutTests/ChangeLog neither lists a valid reviewer nor contains the string "Unreviewed" or "Rubber stamp" (case insensitive).

Full output: http://webkit-queues.appspot.com/results/5326877682040832

Comment 4 Andreas Kling 2014-02-16 19:46:50 PST

Committed r164204: <http://trac.webkit.org/changeset/164204>

Comment 5 Brent Fulgham 2016-07-19 13:08:40 PDT

*** Bug 120497 has been marked as a duplicate of this bug. ***