corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 479943. Pass in the right owner for link clicks and form submissions and stop inheriting from the document. r=dveditz, sr=jst

Browse Source
This commit is contained in:
Boris Zbarsky
2009-04-13 11:32:02 -04:00
parent 4c855fa80a
commit 08d61349bc
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docshell/base/nsDocShell.cpp
View File

@@ -6907,8 +6907,8 @@ nsDocShell::InternalLoad(nsIURI * aURI,
// One more twist: Don't inherit the owner for external loads.
if (aLoadType != LOAD_NORMAL_EXTERNAL && !owner &&
(aFlags & INTERNAL_LOAD_FLAGS_INHERIT_OWNER) &&
((NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
inherits) || URIIsLocalFile(aURI))) {
NS_SUCCEEDED(URIInheritsSecurityContext(aURI, &inherits)) &&
inherits) {
// Don't allow loads that would inherit our security context
// if this document came from an unsafe channel.