Default javascript: URIs to running in a sandbox instead of not running atall. Bug 376484, r+sr=jst

This commit is contained in:
bzbarsky@mit.edu 2007-04-05 15:49:32 -07:00
parent bd84191154
commit 84fe4da16a
5 changed files with 32 additions and 2 deletions

View File

@ -80,7 +80,7 @@ interface nsIScriptChannel : nsISupports
/** /**
* Whether and how the program represented by this channel is to be executed. * Whether and how the program represented by this channel is to be executed.
* The default value if this property has never been set on this channel MUST * The default value if this property has never been set on this channel MUST
* be NO_EXECUTION. * be either EXECUTE_IN_SANDBOX or NO_EXECUTION.
* *
* @throws NS_ERROR_INVALID_ARG when set to an unrecognized value. * @throws NS_ERROR_INVALID_ARG when set to an unrecognized value.
*/ */

View File

@ -435,7 +435,7 @@ nsJSChannel::nsJSChannel() :
mLoadFlags(LOAD_NORMAL), mLoadFlags(LOAD_NORMAL),
mActualLoadFlags(LOAD_NORMAL), mActualLoadFlags(LOAD_NORMAL),
mPopupState(openOverridden), mPopupState(openOverridden),
mExecutionPolicy(NO_EXECUTION), mExecutionPolicy(EXECUTE_IN_SANDBOX),
mIsActive(PR_FALSE), mIsActive(PR_FALSE),
mOpenedStreamChannel(PR_FALSE) mOpenedStreamChannel(PR_FALSE)
{ {

View File

@ -0,0 +1,10 @@
<!DOCTYPE html>
<html>
<body>
<p style="color: green">This is text</p>
<p style="color: green">This is more text</p>
<p style="color: green">This is yet more text</p>
<p style="color: green">This is even more text</p>
</body>
</html>

View File

@ -0,0 +1,19 @@
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" type="text/css"
href="data:text/css, .g1 { color: green }">
<link rel="stylesheet" type="text/css"
href="javascript:' .g2 { color: green }'">
<style type="text/css">
@import url("data:text/css, .g3 { color: green }");
@import url("javascript:' .g4 { color: green }'");
</style>
</head>
<body>
<p class="g1">This is text</p>
<p class="g2">This is more text</p>
<p class="g3">This is yet more text</p>
<p class="g4">This is even more text</p>
</body>
</html>

View File

@ -206,3 +206,4 @@ fails == 368504-1.html 368504-1-ref.html # bug 368504
== 372062-1.html 372062-1-ref.html == 372062-1.html 372062-1-ref.html
== 374038-1.xul 374038-1-ref.xul == 374038-1.xul 374038-1-ref.xul
== 374038-2.xul 374038-2-ref.xul == 374038-2.xul 374038-2-ref.xul
== 376484-1.html 376484-1-ref.html