The AVFoundation media engine should be configured to disallow cross site media references.
Created attachment 93499 [details]
Comment on attachment 93499 [details]
This was reviewed by Maciej.
The new test is failing on Leopard and SnowLeopard.
(In reply to comment #4)
> The new test is failing on Leopard and SnowLeopard.
Looks OK on Leopard so far.
Added to SL skipped list in http://trac.webkit.org/changeset/86508.
Revision r86506 cherry-picked into qtwebkit-2.2 with commit a4f1520 <http://gitorious.org/webkit/qtwebkit/commit/a4f1520>