angler-fishThe Vulnerability History Project

2010-10-11 Michael Saboff <msaboff@apple.com>

      Reviewed by Darin Adler.

        Added and changed tests to verify that DOMWindow objects are
        create with appropriate constructors and that those constructors
        are not callable directly.
        https://bugs.webkit.org/show_bug.cgi?id=47422

        * fast/dom/Window/window-constructor-expected.txt: Added.
        * fast/dom/Window/window-constructor.html: Added.
        * fast/dom/Window/window-properties-expected.txt:
        * fast/dom/Window/window-property-descriptors-expected.txt:
        * fast/dom/prototype-inheritance-2-expected.txt:
        * fast/dom/script-tests/constructors-cached.js:
        * fast/dom/wrapper-classes-expected.txt:
        * http/tests/security/cross-frame-access-get-expected.txt:
        * http/tests/security/cross-frame-access-get.html:
        * http/tests/security/cross-frame-access-put.html:
        * inspector/console-dir-global-expected.txt:
        * java/lc3/JSObject/ToJSObject-001-expected.txt:
        * java/lc3/JSObject/ToObject-001-expected.txt:
2010-10-11  Michael Saboff  <msaboff@apple.com>

        Reviewed by Darin Adler.

        Changed DOMWindow to have a constructor.  Updated the code generator
        to add security checks to the constructors if CheckDomainSecurity is
        set.  Also changed the constructor generation code to use
        globalObject->prototype() for DOMWindow object prototypes instead
        of &quotself&quot.
        https://bugs.webkit.org/show_bug.cgi?id=47422

        Test: fast/dom/Window/window-constructor.html

        * bindings/scripts/CodeGeneratorJS.pm:
        * page/DOMWindow.idl:

git-svn-id: svn://svn.chromium.org/blink/trunk@69553 bbb929c8-8fbe-4397-9dbb-9b2b20218538
    
commit 4c5a59e1c3ca19734d09d71a174a925f61bd24aa
-23
-3
-4
-54
-40
+1 -1
-1
+7 -7
+1 -1
-3
-1
-1
-1
+1 -1
+1 -1
+1 -1
+1 -1
-16
+1 -11
+1
expand_less