Bug 479943. Pass in the right owner for link clicks and form submissions and stop inheriting from the document. r=dveditz, sr=jst, a=dveditz
git-svn-id: svn://10.0.0.236/trunk@257026 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -6782,8 +6782,8 @@ nsDocShell::InternalLoad(nsIURI * aURI,
|
||||
// One more twist: Don't inherit the owner for external loads.
|
||||
if (aLoadType != LOAD_NORMAL_EXTERNAL && !owner &&
|
||||
(aFlags & INTERNAL_LOAD_FLAGS_INHERIT_OWNER) &&
|
||||
((NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
|
||||
inherits) || URIIsLocalFile(aURI))) {
|
||||
NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
|
||||
inherits) {
|
||||
|
||||
// Don't allow loads that would inherit our security context
|
||||
// if this document came from an unsafe channel.
|
||||
|
||||
Reference in New Issue
Block a user