gecko-dev/docshell
mstoltz%netscape.com d6e2839371 bug 77485 - exploit inserting a function into another window using targeted
javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner
in nsDocShell::LoadInternal to before the target docshell is called, and
changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get
the principal from the function object's scope chain if the function object's
principal is the system principal. r=jst, sr=vidur, a=asa.
2001-05-30 02:22:22 +00:00
..
base bug 77485 - exploit inserting a function into another window using targeted 2001-05-30 02:22:22 +00:00
build Fix MOZ_TRACK_MODULE_DEPS (senna tinderbox) bustage by adding new header file dependencies from XPCDOM landing to REQUIRES. 2001-05-08 19:19:03 +00:00
macbuild Follow-up to the xpcdom landing: nothing should link against the dom library anymore, it's a component now. sr=jst. 2001-05-12 12:47:41 +00:00
shistory ignore generated makefiles 1999-12-24 09:16:59 +00:00
.cvsignore Adding local .cvsignore file; r=none 1999-11-30 23:22:27 +00:00
Makefile.in Updated the UNIX makefiles to be in sync with the Windows ones. (Not Part of the build). 1999-11-29 18:42:33 +00:00
makefile.win Now that we have decided that there is only one docshell for all content types, we needed to get rid of the base class/ content type implementation. This checkin takes and moves the nsDocShellBase to be nsDocShell. It now holds the nsIHTMLDocShell stuff. This will be going away. nsCDocShell was created to replace the previous nsCHTMLDocShell. 1999-11-12 07:28:25 +00:00