mstoltz%netscape.com 00ba04ac0e bug 77485 - exploit inserting a function into another window using targeted ... javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner in nsDocShell::LoadInternal to before the target docshell is called, and changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get the principal from the function object's scope chain if the function object's principal is the system principal. r=jst, sr=vidur, a=asa.		2001-05-30 02:22:22 +00:00
..
base	bug 77485 - exploit inserting a function into another window using targeted	2001-05-30 02:22:22 +00:00
build	Fix MOZ_TRACK_MODULE_DEPS (senna tinderbox) bustage by adding new header file dependencies from XPCDOM landing to REQUIRES.	2001-05-08 19:19:03 +00:00
macbuild	Follow-up to the xpcdom landing: nothing should link against the dom library anymore, it's a component now. sr=jst.	2001-05-12 12:47:41 +00:00
shistory	ignore generated makefiles	1999-12-24 09:16:59 +00:00
.cvsignore	Adding local .cvsignore file; r=none	1999-11-30 23:22:27 +00:00
Makefile.in	Updated the UNIX makefiles to be in sync with the Windows ones. (Not Part of the build).	1999-11-29 18:42:33 +00:00
makefile.win	Now that we have decided that there is only one docshell for all content types, we needed to get rid of the base class/ content type implementation. This checkin takes and moves the nsDocShellBase to be nsDocShell. It now holds the nsIHTMLDocShell stuff. This will be going away. nsCDocShell was created to replace the previous nsCHTMLDocShell.	1999-11-12 07:28:25 +00:00