NEW 46145
XMLHttpRequest: open() does not throw an INVALID_ACCESS_ERR exception if either user or password is passed as argument and the origin of url does not match the XMLHttpRequest origin 
https://bugs.webkit.org/show_bug.cgi?id=46145
Summary XMLHttpRequest: open() does not throw an INVALID_ACCESS_ERR exception if eith...
Jian Li
Reported 2010-09-20 17:38:57 PDT
XMLHttpRequest: open() does not throw an INVALID_ACCESS_ERR exception if either user or password is passed as argument and the origin of url does not match the XMLHttpRequest origin Test: http://tc.labs.opera.com/apis/XMLHttpRequest/open-user-password-non-same-origin.htm
Attachments
Add attachment proposed patch, testcase, etc.
Note You need to log in before you can comment on or make changes to this bug.