Hello Darin,

I am sorry for posting to the wrong list, I will subscribe to the webkit-help forum for the future. Thank you very much for the detailed and accurate response.

Best regards
Alex

Darin Adler wrote:
On Dec 7, 2009, at 6:28 AM, Alexander Vassilev wrote:

With qtwebkit 4.5.x I had no problems doing so, no cross-site scripting 
blocking by webkit, everything just worked (i did security control by myself). 
With qt 4.6 however, I get an empty responseText of the XMLHttpRequest object.

I think this message belongs on webkit-help rather than webkit-dev. Please look at 
<http://webkit.org/contact.html> to see the description of the purpose of the 
mailing lists.

The change in behavior is due to:

    https://bugs.webkit.org/show_bug.cgi?id=20249
    http://trac.webkit.org/changeset/41297

is there a way to disable this security feature, like it was in the qt-4.5.x 
version of WebKit?

The setAllowUniversalAccessFromFileUrls function is what you are looking for, I 
think.

    -- Darin


--------------------------------------------------------

This e-mail and any attached files are confidential and intended solely for the 
use of the individual or entity to whom they are addressed. If you have 
received this e-mail by mistake, please notify the sender immediately and 
delete it from your system. You must not copy the message or disclose its 
contents to anyone.

Think of the environment: don't print this e-mail unless you really need to.

--------------------------------------------------------


<<attachment: avasilev.vcf>>

_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
http://lists.webkit.org/mailman/listinfo.cgi/webkit-dev

Reply via email to