Bug 128889 (CVE-2014-1309)

Summary: Ensure that removing an iframe from the DOM tree disconnects its Frame.
Product: WebKit Reporter: Andreas Kling <kling>
Component: FramesAssignee: Andreas Kling <kling>
Status: RESOLVED FIXED    
Severity: Normal CC: chai, commit-queue, esprehn+autocc, gyuyoung.kim, kling, rniwa
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch commit-queue: commit-queue-

Attachments
Patch (4.06 KB, patch)
2014-02-16 16:25 PST, Andreas Kling 		commit-queue: commit-queue-
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Andreas Kling
Comment 1 2014-02-16 16:23:06 PST
<rdar://problem/15671221>
Andreas Kling
Comment 2 2014-02-16 16:25:08 PST
Created attachment 224325 [details] Patch
WebKit Commit Bot
Comment 3 2014-02-16 17:30:37 PST
Comment on attachment 224325 [details] Patch Rejecting attachment 224325 [details] from commit-queue. Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.appspot.com', '--bot-id=webkit-cq-03', 'validate-changelog', '--check-oops', '--non-interactive', 224325, '--port=mac']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit /Volumes/Data/EWS/WebKit/LayoutTests/ChangeLog neither lists a valid reviewer nor contains the string "Unreviewed" or "Rubber stamp" (case insensitive). Full output: http://webkit-queues.appspot.com/results/5326877682040832
Andreas Kling
Comment 4 2014-02-16 19:46:50 PST
Committed r164204: <http://trac.webkit.org/changeset/164204>
Brent Fulgham
Comment 5 2016-07-19 13:08:40 PDT
*** Bug 120497 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.