Title: [100181] trunk/Source/WebCore
Revision
100181
Author
[email protected]
Date
2011-11-14 12:56:15 -0800 (Mon, 14 Nov 2011)

Log Message

SecurityContext::isSecureTransitionTo should not refer to empty security origins
https://bugs.webkit.org/show_bug.cgi?id=72277

Reviewed by Eric Seidel.

Now that we're tracking the "failed to initialized SecurityOrigin"
state explicitly, we should use that to determine whether we can make a
secure transition.

* dom/SecurityContext.cpp:
(WebCore::SecurityContext::isSecureTransitionTo):

Modified Paths

Diff

Modified: trunk/Source/WebCore/ChangeLog (100180 => 100181)


--- trunk/Source/WebCore/ChangeLog	2011-11-14 20:50:14 UTC (rev 100180)
+++ trunk/Source/WebCore/ChangeLog	2011-11-14 20:56:15 UTC (rev 100181)
@@ -1,3 +1,17 @@
+2011-11-14  Adam Barth  <[email protected]>
+
+        SecurityContext::isSecureTransitionTo should not refer to empty security origins
+        https://bugs.webkit.org/show_bug.cgi?id=72277
+
+        Reviewed by Eric Seidel.
+
+        Now that we're tracking the "failed to initialized SecurityOrigin"
+        state explicitly, we should use that to determine whether we can make a
+        secure transition.
+
+        * dom/SecurityContext.cpp:
+        (WebCore::SecurityContext::isSecureTransitionTo):
+
 2011-11-14  Vincent Scheib  <[email protected]>
 
         Mouse Lock: Renaming to 'Pointer Lock': ENABLE Flags

Modified: trunk/Source/WebCore/dom/SecurityContext.cpp (100180 => 100181)


--- trunk/Source/WebCore/dom/SecurityContext.cpp	2011-11-14 20:50:14 UTC (rev 100180)
+++ trunk/Source/WebCore/dom/SecurityContext.cpp	2011-11-14 20:56:15 UTC (rev 100181)
@@ -56,8 +56,10 @@
 
 bool SecurityContext::isSecureTransitionTo(const KURL& url) const
 {
-    // This origin represents a new window created by the application.
-    if (securityOrigin()->isEmpty())
+    // If we haven't initialized our security origin by now, this is probably
+    // a new window created via the API (i.e., that lacks an origin and lacks
+    // a place to inherit the origin from).
+    if (!haveInitializedSecurityOrigin())
         return true;
 
     RefPtr<SecurityOrigin> other = SecurityOrigin::create(url);
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes

Reply via email to