RESOLVED FIXED 127285
Improve security mitigation added in webkit r94001. We missed the case where attachLine was called when we already had an inline box wrapper. 
https://bugs.webkit.org/show_bug.cgi?id=127285
Summary Improve security mitigation added in webkit r94001. We missed the case where ...
Peter Molnar
Reported 2014-01-20 04:45:49 PST
Merged from blink: https://src.chromium.org/viewvc/blink?revision=150697&view=revision
Attachments
patch (3.06 KB, patch)
2014-01-20 04:49 PST, Peter Molnar 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Peter Molnar
Comment 1 2014-01-20 04:49:26 PST
Created attachment 221647 [details] patch
Brent Fulgham
Comment 2 2014-04-16 14:19:51 PDT
Comment on attachment 221647 [details] patch r=me
WebKit Commit Bot
Comment 3 2014-04-16 14:51:24 PDT
Comment on attachment 221647 [details] patch Clearing flags on attachment: 221647 Committed r167387: <http://trac.webkit.org/changeset/167387>
WebKit Commit Bot
Comment 4 2014-04-16 14:51:28 PDT
All reviewed patches have been landed. Closing bug.
David Kilzer (:ddkilzer)
Comment 5 2014-04-16 16:43:31 PDT
<rdar://problem/16641230>
Brent Fulgham
Comment 6 2016-07-14 10:23:47 PDT
*** Bug 116911 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.