Skip to content
  • abarth@webkit.org's avatar
    WebCore: · c12acbed
    abarth@webkit.org authored
    2009-06-21  Daniel Bates  <dbates@intudata.com>
    
            Reviewed by Adam Barth.
    
            https://bugs.webkit.org/show_bug.cgi?id=26580
            
            Fix to enable XSSAuditor on child windows.
            
            Test: http/tests/security/xssAuditor/link-opens-new-window.html
            
            * page/XSSAuditor.cpp:
            (WebCore::XSSAuditor::XSSAuditor):
            (WebCore::XSSAuditor::isEnabled):
            (WebCore::XSSAuditor::canEvaluate):
            (WebCore::XSSAuditor::canCreateInlineEventListener):
            (WebCore::XSSAuditor::canLoadExternalScriptFromSrc):
            (WebCore::XSSAuditor::canLoadObject):
            * page/XSSAuditor.h: Removed method setXSSAuditorEnabled, and field m_isEnabled. Moved implementation of isEnabled to XSSAuditor.cpp and changed implementation to query Settings.
    
    LayoutTests:
    
    2009-06-21  Daniel Bates  <dbates@intudata.com>
    
            Reviewed by Adam Barth.
            
            Test for https://bugs.webkit.org/show_bug.cgi?id=26580
            
            Tests that XSSAuditor (if enabled) prevents script execution in child window.
    
            * http/tests/security/xssAuditor/link-opens-new-window-expected.txt: Added.
            * http/tests/security/xssAuditor/link-opens-new-window.html: Added.
            * http/tests/security/xssAuditor/resources/echo-intertag-and-notify.php: Added.
    
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@44927 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    c12acbed