mstoltz%netscape.com b51a5f7784 bug 77485 - exploit inserting a function into another window using targeted ...

javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner
in nsDocShell::LoadInternal to before the target docshell is called, and
changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get
the principal from the function object's scope chain if the function object's
principal is the system principal. r=jst, sr=vidur, a=asa.


git-svn-id: svn://10.0.0.236/trunk@96045 18797224-902f-48f8-a5cc-f745e15eee43

2001-05-30 02:22:22 +00:00

..

base

bug 77485 - exploit inserting a function into another window using targeted

2001-05-30 02:22:22 +00:00

build

Fix MOZ_TRACK_MODULE_DEPS (senna tinderbox) bustage by adding new header file dependencies from XPCDOM landing to REQUIRES.

2001-05-08 19:19:03 +00:00

macbuild

Follow-up to the xpcdom landing: nothing should link against the dom library anymore, it's a component now. sr=jst.

2001-05-12 12:47:41 +00:00

shistory

Initial checkin. r=law a=don

1999-12-22 22:35:31 +00:00

Makefile.in

…

makefile.win

…