2011-01-08 Charlie Reis <creis@chromium.org>
[WebKit.git] / Source / WebCore / ChangeLog
index efb906106a70c41e3518dd0f18590da1153d5432..e409e3c797ab83568b0315d0a1f3dc1581bf5ce5 100644 (file)
@@ -1,3 +1,18 @@
+2011-01-08  Charlie Reis  <creis@chromium.org>
+
+        Reviewed by Mihai Parparita.
+
+        Canceled frame loads can corrupt back forward list
+        https://bugs.webkit.org/show_bug.cgi?id=50254
+
+        Avoids changing m_currentItem until the navigation commits.
+        Also resets top-level history items if a subframe navigation is canceled.
+
+        * WebCore/loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::checkLoadCompleteForThisFrame):
+        * WebCore/loader/HistoryController.cpp:
+        * WebCore/loader/HistoryController.h:
+
 2011-01-08  Chang Shu  <chang.shu@nokia.com>
 
         Reviewed by Kenneth Rohde Christiansen.