2009-09-08 Adam Barth <abarth@webkit.org>
authorabarth@webkit.org <abarth@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 10 Sep 2009 02:54:32 +0000 (02:54 +0000)
committerabarth@webkit.org <abarth@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 10 Sep 2009 02:54:32 +0000 (02:54 +0000)
commita847c35cb3b73bc75a974340c6ef307059c93708
tree03048c45850edec0afc415c4ad99dd2e06b32391
parentbb34c270e496a3510394159768628ca91fc38b8c
2009-09-08  Adam Barth  <abarth@webkit.org>

        Reviewed by Eric Seidel.

        Missing checkout for getSVGDocument()
        https://bugs.webkit.org/show_bug.cgi?id=29064

        The V8 code generator didn't understand SVGCheckSecurityDocument.

        Tests: http/tests/security/xss-DENIED-getSVGDocument-iframe.html
               http/tests/security/xss-DENIED-getSVGDocument-object.html

        * bindings/scripts/CodeGeneratorV8.pm:
2009-09-08  Adam Barth  <abarth@webkit.org>

        Reviewed by Eric Seidel.

        Missing checkout for getSVGDocument()
        https://bugs.webkit.org/show_bug.cgi?id=29064

        Add tests that getSVGDocument() has the proper checks.

        * http/tests/security/resources/flag.php: Added.
        * http/tests/security/xss-DENIED-getSVGDocument-iframe-expected.txt: Added.
        * http/tests/security/xss-DENIED-getSVGDocument-iframe.html: Added.
        * http/tests/security/xss-DENIED-getSVGDocument-object-expected.txt: Added.
        * http/tests/security/xss-DENIED-getSVGDocument-object.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@48240 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/http/tests/security/resources/empty-svg.php [new file with mode: 0644]
LayoutTests/http/tests/security/xss-DENIED-getSVGDocument-iframe-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/xss-DENIED-getSVGDocument-iframe.html [new file with mode: 0644]
LayoutTests/http/tests/security/xss-DENIED-getSVGDocument-object-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/security/xss-DENIED-getSVGDocument-object.html [new file with mode: 0644]
WebCore/ChangeLog
WebCore/bindings/scripts/CodeGeneratorV8.pm