Grant access to SOAP response document's properties and also allow the document to be serializable. b=193953, r=heikki@netscape.com, sr=jst@netscape.com

git-svn-id: svn://10.0.0.236/trunk@143644 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
harishd%netscape.com
2003-06-12 20:18:34 +00:00
parent 2298c9f29f
commit 893e8e41f1
7 changed files with 79 additions and 15 deletions

View File

@@ -880,17 +880,17 @@ nsScriptSecurityManager::CheckSameOriginDOMProp(nsIPrincipal* aSubject,
nsCOMPtr<nsIAggregatePrincipal> subjectAgg(do_QueryInterface(aSubject, &rv));
NS_ENSURE_SUCCESS(rv, rv);
PRBool subjectSetDomain = PR_FALSE;
subjectAgg->WasCodebaseChanged(&subjectSetDomain);
PRBool subjectDomainChanged = PR_FALSE;
subjectAgg->GetDomainChanged(&subjectDomainChanged);
nsCOMPtr<nsIAggregatePrincipal> objectAgg(do_QueryInterface(aObject, &rv));
NS_ENSURE_SUCCESS(rv, rv);
PRBool objectSetDomain = PR_FALSE;
objectAgg->WasCodebaseChanged(&objectSetDomain);
PRBool objectDomainChanged = PR_FALSE;
objectAgg->GetDomainChanged(&objectDomainChanged);
// If both or neither explicitly set their domain, allow the access
if (!(subjectSetDomain || objectSetDomain) ||
(subjectSetDomain && objectSetDomain))
if (!(subjectDomainChanged || objectDomainChanged) ||
(subjectDomainChanged && objectDomainChanged))
return NS_OK;
}