Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix 23227 Document object vulnerability

Browse Source 
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@58789 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
norris%netscape.com
2000-01-26 15:33:57 +00:00
parent 56ce33c8e7
commit 0dd1063455
31 changed files with 146 additions and 164 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
mozilla/content/html/document/src/nsHTMLContentSink.cpp
View File

@@ -3891,8 +3891,9 @@ HTMLContentSink::EvaluateScript(nsString& aScript,
NS_ERROR_FAILURE);
nsCOMPtr<nsIPrincipal> principal;
principal = getter_AddRefs(mDocument->GetDocumentPrincipal());
NS_ASSERTION(principal, "principal expected for document");
rv = mDocument->GetPrincipal(getter_AddRefs(principal));
NS_ASSERTION(NS_SUCCEEDED(rv), "principal expected for document");
if (NS_FAILED(rv)) return rv;
nsAutoString ret;
nsIURI* docURL = mDocument->GetDocumentURL();

4
mozilla/content/html/document/src/nsHTMLDocument.cpp
View File

@@ -1434,8 +1434,8 @@ nsHTMLDocument::GetReferrer(nsString& aReferrer)
NS_IMETHODIMP
nsHTMLDocument::GetDomainURI(nsIURI **uri)
{
nsCOMPtr<nsIPrincipal> principal = GetDocumentPrincipal();
if (!principal)
nsCOMPtr<nsIPrincipal> principal;
if (NS_FAILED(GetPrincipal(getter_AddRefs(principal))))
return NS_ERROR_FAILURE;
nsCOMPtr<nsICodebasePrincipal> codebase = do_QueryInterface(principal);
if (!codebase)