Bug 956382 - Consider document.domain when doing Location security checks. r=mrbkap

This commit is contained in:
Bobby Holley 2014-02-13 18:57:35 -08:00
parent 0e8b3267e2
commit 02b3bf5876

View File

@ -908,7 +908,7 @@ nsLocation::CallerSubsumes()
return false;
nsCOMPtr<nsIScriptObjectPrincipal> sop = do_QueryInterface(outer);
bool subsumes = false;
nsresult rv = nsContentUtils::GetSubjectPrincipal()->Subsumes(sop->GetPrincipal(), &subsumes);
nsresult rv = nsContentUtils::GetSubjectPrincipal()->SubsumesConsideringDomain(sop->GetPrincipal(), &subsumes);
NS_ENSURE_SUCCESS(rv, false);
return subsumes;
}