Grant access to SOAP response document's properties and also allow the document to be serializable. b=193953, r=heikki@netscape.com, sr=jst@netscape.com
git-svn-id: svn://10.0.0.236/trunk@143644 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -880,17 +880,17 @@ nsScriptSecurityManager::CheckSameOriginDOMProp(nsIPrincipal* aSubject,
|
||||
|
||||
nsCOMPtr<nsIAggregatePrincipal> subjectAgg(do_QueryInterface(aSubject, &rv));
|
||||
NS_ENSURE_SUCCESS(rv, rv);
|
||||
PRBool subjectSetDomain = PR_FALSE;
|
||||
subjectAgg->WasCodebaseChanged(&subjectSetDomain);
|
||||
PRBool subjectDomainChanged = PR_FALSE;
|
||||
subjectAgg->GetDomainChanged(&subjectDomainChanged);
|
||||
|
||||
nsCOMPtr<nsIAggregatePrincipal> objectAgg(do_QueryInterface(aObject, &rv));
|
||||
NS_ENSURE_SUCCESS(rv, rv);
|
||||
PRBool objectSetDomain = PR_FALSE;
|
||||
objectAgg->WasCodebaseChanged(&objectSetDomain);
|
||||
PRBool objectDomainChanged = PR_FALSE;
|
||||
objectAgg->GetDomainChanged(&objectDomainChanged);
|
||||
|
||||
// If both or neither explicitly set their domain, allow the access
|
||||
if (!(subjectSetDomain || objectSetDomain) ||
|
||||
(subjectSetDomain && objectSetDomain))
|
||||
if (!(subjectDomainChanged || objectDomainChanged) ||
|
||||
(subjectDomainChanged && objectDomainChanged))
|
||||
return NS_OK;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user