gecko-dev/docshell
mstoltz%netscape.com d6e2839371 bug 77485 - exploit inserting a function into another window using targeted
javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner
in nsDocShell::LoadInternal to before the target docshell is called, and
changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get
the principal from the function object's scope chain if the function object's
principal is the system principal. r=jst, sr=vidur, a=asa.
2001-05-30 02:22:22 +00:00
..
base bug 77485 - exploit inserting a function into another window using targeted 2001-05-30 02:22:22 +00:00
build Fix MOZ_TRACK_MODULE_DEPS (senna tinderbox) bustage by adding new header file dependencies from XPCDOM landing to REQUIRES. 2001-05-08 19:19:03 +00:00
macbuild Follow-up to the xpcdom landing: nothing should link against the dom library anymore, it's a component now. sr=jst. 2001-05-12 12:47:41 +00:00
shistory
.cvsignore
Makefile.in
makefile.win