Give the about:blank document we create when loading a javascript: URI from
history the principal of the history entry so the JS will actually execute against that about:blank, not in a sandbox. Bug 384014, r+sr+a=jst git-svn-id: svn://10.0.0.236/trunk@237380 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -8014,7 +8014,8 @@ nsDocShell::LoadHistoryEntry(nsISHEntry * aEntry, PRUint32 aLoadType)
|
||||
// Replace the current document with about:blank now to prevent
|
||||
// anything from the current document from leaking into any JavaScript
|
||||
// code in the URL.
|
||||
rv = CreateAboutBlankContentViewer(nsnull);
|
||||
nsCOMPtr<nsIPrincipal> prin = do_QueryInterface(owner);
|
||||
rv = CreateAboutBlankContentViewer(prin);
|
||||
|
||||
if (NS_FAILED(rv)) {
|
||||
// The creation of the intermittent about:blank content
|
||||
|
||||
Reference in New Issue
Block a user