Bug 479943. Pass in the right owner for link clicks and form submissions and stop inheriting from the document. r=dveditz, sr=jst, a=dveditz

git-svn-id: svn://10.0.0.236/trunk@257026 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
bzbarsky%mit.edu
2009-04-23 13:01:43 +00:00
parent 8496b3458c
commit cc5477e87b
2 changed files with 4 additions and 4 deletions

View File

@@ -6782,8 +6782,8 @@ nsDocShell::InternalLoad(nsIURI * aURI,
// One more twist: Don't inherit the owner for external loads.
if (aLoadType != LOAD_NORMAL_EXTERNAL && !owner &&
(aFlags & INTERNAL_LOAD_FLAGS_INHERIT_OWNER) &&
((NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
inherits) || URIIsLocalFile(aURI))) {
NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
inherits) {
// Don't allow loads that would inherit our security context
// if this document came from an unsafe channel.