Bug 50106 – WebKit2 asynchronous policy check for window.open() clashes with synchronous operations on the opened window's DOM

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: WebKit2

[zalan]

with the following code

var newWin = window.open("", "awin");
newWin.document.open();
newWin.document.close();

in WebKit2, the document.open() cancels the outstanding policy check, issued by window.open(), while with WebKit, since the policy check happens in a sync manner, document.open() does not cancel it. When the execution hits document.open() (Document::open(Document* ownerDocument)), with WebKit2 the frame is in FrameStateProvisional state, while with WebKit, it is in FrameStateComplete state.

[zalan]

Created attachment 74916 [details]
test case

[zalan]

got fixed with https://bugs.webkit.org/show_bug.cgi?id=49605

Committed r72122: http://trac.webkit.org/changeset/72122