Comment #9 on issue 22472 by noel.gordon: crash - dragging over served page
containing a local iframe
http://code.google.com/p/chromium/issues/detail?id=22472
Cool, so at the two locations where the newTarget is accessed as a
frame element, the following should do the business:
if (newTarget->hasTagName(frameTag) || newTarget->hasTagName(iframeTag)) {
Frame* frame =
static_cast<HTMLFrameElementBase*>(newTarget)->contentFrame();
if (frame) {
accept = frameElement->eventHandler()->updateDragAndDrop(event,
clipboard);
}
} else {
accept = dispatchDragEvent(eventNames().dragenterEvent, newTarget,
event, clipboard);
}
Note that src="file:///etc/passwd" is sufficient to cause the crash
on win32, and it's not because etc/passwd doesn't exist -- it's due
to file:/// alone.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---
