Bug 32685

Summary:

add LayoutTests/http/security/xss-DENIED-assign-location-href-javascript.html

Product:

WebKit

Reporter:

Dirk Pranke <dpranke>

Component:

Tools / Tests

Assignee:

Dirk Pranke <dpranke>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

abarth, commit-queue, webkit.review.bot

Priority:

Version:

528+ (Nightly build)

Hardware:

OS:

OS X 10.5

Attachments:

Description	Flags
XSS test on setting document.location in a frame from a different origin	none

Dirk Pranke

Reported 2009-12-17 16:57:15 PST

Upstreaming this test from Chromium -- WebKit passes it, so I don't think there's a security issue.

Attachments
XSS test on setting document.location in a frame from a different origin (2.41 KB, patch) 2009-12-17 17:02 PST, Dirk Pranke	no flags	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Dirk Pranke

Comment 1 2009-12-17 17:02:43 PST

Created attachment 45111 [details] XSS test on setting document.location in a frame from a different origin

WebKit Review Bot

Comment 2 2009-12-17 17:05:50 PST

style-queue ran check-webkit-style on attachment 45111 [details] without any errors.

Adam Barth

Comment 3 2009-12-17 22:30:56 PST

Comment on attachment 45111 [details] XSS test on setting document.location in a frame from a different origin Yay for passing tests. :)

WebKit Commit Bot

Comment 4 2009-12-17 22:39:57 PST

Comment on attachment 45111 [details] XSS test on setting document.location in a frame from a different origin Clearing flags on attachment: 45111 Committed r52301: <http://trac.webkit.org/changeset/52301>

WebKit Commit Bot

Comment 5 2009-12-17 22:40:01 PST

All reviewed patches have been landed. Closing bug.

Note You need to log in before you can comment on or make changes to this bug.