Mozilla

Go to file

mstoltz%netscape.com b51a5f7784 bug 77485 - exploit inserting a function into another window using targeted

javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner
in nsDocShell::LoadInternal to before the target docshell is called, and
changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get
the principal from the function object's scope chain if the function object's
principal is the system principal. r=jst, sr=vidur, a=asa.


git-svn-id: svn://10.0.0.236/trunk@96045 18797224-902f-48f8-a5cc-f745e15eee43

2001-05-30 02:22:22 +00:00

buildtools

nsinstall.c source for OS/2

2001-05-01 22:43:38 +00:00

CVSROOT

Pseudo-automatic update of changes made by knous@mozilla.org.

2001-05-29 22:50:53 +00:00

l10nkits/client

updating NPL boilerplate to 1.1; only comments changed

1999-10-05 23:48:08 +00:00

mozilla

bug 77485 - exploit inserting a function into another window using targeted