Timeline



Mar 5, 2007:

11:04 PM Changeset in webkit [19977] by kmccullo
  • 13 edits
    2 adds in trunk

LayoutTests:

Reviewed by Mark and Dave H.

  • rdar://problem/5038491 An oversite of the security fix that prevented remote from loading local is that it prevents user style sheets when the site is remote. This fixes that.
  • http/tests/security/local-user-CSS-from-remote-expected.txt: Added.
  • http/tests/security/local-user-CSS-from-remote.html: Added.

WebCore:

Reviewed by Mark and Dave H.

  • rdar://problem/5038491 An oversite of the security fix that prevented remote from loading local is that it prevents user style sheets when the site is remote. This fixes that.
  • loader/Cache.cpp: Propogate and check user style sheet flag. (WebCore::createResource): (WebCore::Cache::requestResource):
  • loader/Cache.h: Propogate user style sheet flag.
  • loader/CachedCSSStyleSheet.cpp: Propogate user style sheet flag. (WebCore::CachedCSSStyleSheet::CachedCSSStyleSheet):
  • loader/CachedCSSStyleSheet.h: Propogate user style sheet flag.
  • loader/DocLoader.cpp: Propogate user style sheet flag. (WebCore::DocLoader::requestResource):
  • loader/SubresourceLoader.cpp: Propogate and check user style sheet flag. (WebCore::SubresourceLoader::create):
  • loader/SubresourceLoader.h: Add check for user style sheet flag.
  • loader/loader.cpp: Propogate user style sheet flag. (WebCore::Loader::load): (WebCore::Loader::servePendingRequests):
  • loader/loader.h: Propogate user style sheet flag.

WebKitTools:

Reviewed by Mark and Dave H.

  • rdar://problem/4922454
  • This fixes a security issue by making remote referrers not able to access local resources, unless they register their schemes to be treated as local. The result is that those schemes can access local resources and cannot be accessed by remote referrers. Because this behavior is new a link-on-or-after check is made to determine if the app should use the older, less safe, behavior.
  • DumpRenderTree/DumpRenderTree.m: Add ability to set user style sheet to DRT. (+[LayoutTestController isSelectorExcludedFromWebScript:]): (+[LayoutTestController webScriptNameForSelector:]): (-[LayoutTestController setUserStyleSheetLocation:]): (-[LayoutTestController setUserStyleSheetEnabled:]):
10:33 PM Changeset in webkit [23024] by andersca
  • 2 edits in branches/WindowsMerge/WebCore

Reviewed by Adam.

<rdar://problem/5041348>
Can't watch videos at cnn.com


  • plugins/win/PluginStreamWin.cpp: (WebCore::PluginStreamWin::cancelAndDestroyStream): Change this function back to call call stop() after destroyStream(). Also, make sure to protect the stream since destroyStream can eventually, well, destroy it.
9:41 PM Changeset in webkit [19976] by bdash
  • 1 edit in tags/Safari-5522.2/WebKit/Info.plist

Versioning.

9:40 PM Changeset in webkit [19975] by bdash
  • 3 edits in tags/Safari-5522.2/WebKit

Merge in r19929.

2007-03-01 Justin Garcia <​justin.garcia@apple.com>

Reviewed by harrison


<rdar://problem/4838199>
Integrate Mail and WebKit paste operations


Provide subresources used to create the fragment as a
convenience.

  • WebView/WebHTMLView.mm: (-[WebHTMLView _documentFragmentFromPasteboard:inContext:allowPlainText:chosePlainText:]): Update the calls to the changed method. (-[WebHTMLView _documentFragmentFromPasteboard:forType:inContext:subresources:]): Give the caller the subresources in the WebArchive and RTF cases.
  • WebView/WebHTMLViewPrivate.h:
9:36 PM Changeset in webkit [19974] by bdash
  • 1 copy in tags/Safari-5522.2/WebKit

New tag (part 2).

9:35 PM Changeset in webkit [19973] by bdash
  • 1 add in tags/Safari-5522.2

New tag (part 1).

5:35 PM Changeset in webkit [19972] by zimmermann
  • 142 edits
    10 adds in trunk

Reviewed by Darin.

Fix all (except one) known <use> bug. The remaining bug (12630) is not crucical at all.
Enable <use> again as default SVG feature, as discussed on webkit-dev.

Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12936 (Master bug used to track all current use problems.)
Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12926 (transform attribute not respected in nested <use> elements)
Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12267 (getElementById broken for <use>)
Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12916 (use instance in symbol definition does not work)
Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12917 (mouseout event does not occur after scaling use instance)
Fixes: ​http://bugs.webkit.org/show_bug.cgi?id=12838 (SVG <use> DOM broken for script)

Added test: svg/custom/use-nested-transform.svg
Added test: svg/custom/struct-use-09-b.svg (not yet official W3C-SVG-1.1 testcase)
Fixes test: svg/custom/use-elementInstance-event-target.svg (rectangle now turns green on first click)

5:11 PM Changeset in webkit [19971] by beidson
  • 3 edits in trunk/WebCore

Reviewed by John

Fixes <rdar://problem/4974258>
Adds some key null checking

  • bindings/js/kjs_html.cpp: (KJS::JSHTMLElement::implementsCall): Null check doc/frame
  • bindings/objc/DOMInternal.mm: (-[WebScriptObject _initializeScriptDOMNodeImp]): Null check doc/frame
4:05 PM Changeset in webkit [19970] by zimmermann
  • 5 edits
    4 adds in trunk

Reviewed by Darin.

Path::normalAngleAtLength() / Path::pointAtLength() don't work correctly.
pointAtLength() was not implemented, basically and normalAngleAtLength()
had a bug in the tangent slope calculation.

The normalAngleAtLength() stuff can only be tested with my local textPath support.
New LayoutTest: svg/custom/path-textPath-simulation.svg

3:02 PM Changeset in webkit [19969] by oliver
  • 1 edit
    2 moves
    2 adds in trunk/LayoutTests

2007-03-05 Darin Adler <Darin Adler>

Reviewed by Oliver.

Text encoding test case

  • fast/encoding/char-encoding-expected.txt: Added.
  • fast/encoding/char-encoding.html: Added.
  • fast/encoding/charset-names-expected.txt: Moved.
  • fast/encoding/charset-names.html: Moved.
1:09 PM Changeset in webkit [23023] by andersca
  • 2 edits in branches/WindowsMerge/WebCore

Reviewed by Adam.

<rdar://problem/4987743>
Regression: java content is represented as broken images on pages


  • plugins/win/PluginPackageWin.cpp: (WebCore::PluginPackageWin::load): Make sure to set the size of the NPPluginFuncs struct correctly.
12:39 PM Changeset in webkit [19968] by ap
  • 5 edits
    1 copy
    1 add in trunk

Reviewed by Darin.

​http://bugs.webkit.org/show_bug.cgi?id=12970
Fix and import 4XPath test_core_functions.html test

WebCore:

  • xml/XPathExpression.cpp: (WebCore::XPathExpression::evaluate): Fully initialize the evaluation context.
  • xml/XPathFunctions.cpp: (WebCore::XPath::FunSubstring::doEvaluate): Fixed handling of edge cases. (WebCore::XPath::FunRound::round): Reimplemented to match the spec; exposed FunRound::round() to be used in other functions.

LayoutTests:

  • fast/xpath/4XPath/Core/test_core_functions-expected.txt: Added.
  • fast/xpath/4XPath/Core/test_core_functions.html: Added. The remaining failures with id() are caused by an XML DOM problem - ID attributes declared in an internal subset are not treated as such.
  • fast/xpath/4XPath/Core/test.js: Common data for XPath tests.
12:29 PM Changeset in webkit [19967] by andersca
  • 2 edits in trunk/LayoutTests
  • plugins/get-url-with-blank-target-expected.txt: Update test result.
11:38 AM Changeset in webkit [23022] by aroben
  • 3 edits in branches/WindowsMerge/WebKitWin

Reviewed by Steve.

Added line spacing querying to FontMetrics to support line wrapping.

11:31 AM Changeset in webkit [19966] by andersca
  • 7 edits
    2 adds in trunk

LayoutTests:

Reviewed by Adam, Darin.

<rdar://problem/5025212>
In Mail, a crash occurs at WebCore::Frame::tree() when clicking on embedded flash object

  • plugins/get-url-with-blank-target-expected.txt: Added.
  • plugins/get-url-with-blank-target.html: Added.

WebKit:

Reviewed by Adam, Darin.


<rdar://problem/5025212>
In Mail, a crash occurs at WebCore::Frame::tree() when clicking on embedded flash object

  • Plugins/WebBaseNetscapePluginView.mm: (-[WebBaseNetscapePluginView loadPluginRequest:]): Handle the case where the web view returned from the delegate method is null. Also, send out an error notification in that case so we can catch it.

WebKitTools:

Reviewed by Adam, Darin.

<rdar://problem/5025212>
In Mail, a crash occurs at WebCore::Frame::tree() when clicking on embedded flash object


Add a "getURLNotify" method to the plugin object. This lets you pass a URL, a target and a callback function
to be run when the URL has finished (or failed) loading.


  • DumpRenderTree/TestNetscapePlugIn.subproj/PluginObject.c: (pluginInvoke): (handleCallback):
  • DumpRenderTree/TestNetscapePlugIn.subproj/PluginObject.h:
  • DumpRenderTree/TestNetscapePlugIn.subproj/main.c: (NPP_URLNotify):
10:37 AM Changeset in webkit [19965] by sullivan
  • 2 edits in trunk/WebKit

Reviewed by Darin and Kevin D

  • fixed <rdar://problem/5038087> Header and footer on printed page are too large after certain steps
  • WebView/WebView.mm: (-[WebView _adjustPrintingMarginsForHeaderAndFooter]): This method was modifying the margins in the NSPrintInfo object without any sort of check whether this had already been done. In some cases this can be called multiple times with the same NSPrintInfo, so now we stash information in the NSPrintInfo's dictionary such that we always start with a fresh copy of the original margins.
10:25 AM Changeset in webkit [19964] by ap
  • 12 deletes in trunk/LayoutTests/fast/xpath/4XPath/Core

Remove accidentally committed tests.

9:36 AM Changeset in webkit [19963] by ap
  • 6 edits
    2 moves
    36 adds in trunk

Reviewed by Darin.

​http://bugs.webkit.org/show_bug.cgi?id=12954
XPath relative operations are implemented incorrectly

WebCore:

  • xml/XPathPredicate.cpp: (WebCore::XPath::NumericOp::doEvaluate): (WebCore::XPath::EqTestOp::compare): (WebCore::XPath::EqTestOp::doEvaluate): Reimplemented relative equality operations to match the spec.
  • xml/XPathPredicate.h: (WebCore::XPath::NumericOp::): (WebCore::XPath::EqTestOp::): Moved relative operations to EqTestOp.
  • xml/XPathGrammar.y:
  • xml/XPathParser.cpp: (WebCore::XPath::Parser::nextTokenInternal): (WebCore::XPath::Parser::lex): Adapted for the above changes.

LayoutTests:

  • fast/xpath/4XPath/Core/test_boolean_expr-expected.txt: Added.
  • fast/xpath/4XPath/Core/test_boolean_expr.html: Added.
  • fast/xpath/4XPath/Borrowed/cz_20030217-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/cz_20030217.html: Added.
  • fast/xpath/4XPath/Borrowed/kd_20010423-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/kd_20010423.html: Added.
  • fast/xpath/4XPath/Borrowed/od_20000608-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/od_20000608.html: Added.
  • fast/xpath/4XPath/Borrowed/resources/od_20000608.xml: Added.
  • fast/xpath/4XPath/Borrowed/rs_20010831-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/rs_20010831.html: Added.
  • fast/xpath/4XPath/Borrowed/sr_20021217-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/sr_20021217.html: Added. Added a bunch of XPath tests that already passed.
  • fast/xpath/4XPath/Borrowed/namespace-nodes-expected.txt: Added.
  • fast/xpath/4XPath/Borrowed/namespace-nodes.html: Added.
  • fast/xpath/namespace-nodes-expected.txt: Removed.
  • fast/xpath/namespace-nodes.html: Removed. Moved a previously imported 4XPath test.
1:41 AM Changeset in webkit [19962] by bdash
  • 1 edit in trunk/WebCore/ChangeLog

Pesky apostrophe.

1:39 AM Changeset in webkit [19961] by bdash
  • 2 edits in trunk/WebCore

2007-03-05 Mark Rowe <​mrowe@apple.com>

Reviewed by Lars.

Fix ​http://bugs.webkit.org/show_bug.cgi?id=12947
Bug 12947: REGRESSION: ASSERTION FAILED: maxWidth >= 0 in StringTruncator.cpp:109 in WebCore::truncateString()

Handle nil window correctly in toUserSpace and toDeviceSpace. On Intel Mac's a message to nil that returns a
float will return 0.0. We use this as the divisor in calculating a scale factor, which results in NaN being
introduced into our rect.

  • platform/mac/ScreenMac.mm: (WebCore::toUserSpace): (WebCore::toDeviceSpace):
1:07 AM Changeset in webkit [19960] by rwlbuis
  • 3 edits
    5 adds in trunk

Reviewed by Darin.

​http://bugs.webkit.org/show_bug.cgi?id=12868
parts of the CSS classes in this simple SVG example are not applied

Make sure the xml stylesheets are parsed in strict mode.

1:00 AM Changeset in webkit [23021] by sfalken
  • 2 edits in branches/WindowsMerge/WebCore

2007-03-05 Steve Falkenburg <​sfalken@apple.com>

Fix build

  • plugins/win/PluginStreamWin.cpp: (WebCore::PluginStreamWin::stop): Call cancel() instead of stopLoading(), since the latter was removed.

Mar 4, 2007:

10:18 PM Changeset in webkit [19959] by ap
  • 2 edits in trunk/LayoutTests

Reviewed by Darin.

​http://bugs.webkit.org/show_bug.cgi?id=12961
shouldBe() should support NaN

  • fast/js/resources/js-test-pre.js: Make shouldBe() succeed if both sides are NaN numbers.
9:40 PM Changeset in webkit [19958] by adele
  • 4 edits
    2 adds in trunk

LayoutTests:

Reviewed by Darin.

  • fast/events/keydown-keypress-preventDefault-expected.txt: Added.
  • fast/events/keydown-keypress-preventDefault.html: Added.

WebCore:

Reviewed by Darin.

Change to dispatch the keypress event during the defaultEventHandler for keydown events. This matches IE behavior.
This is preparation for fixing event dispatch with input methods (​http://bugs.webkit.org/show_bug.cgi?id=10871)

Test: fast/events/keydown-keypress-preventDefault.html

  • dom/EventTargetNode.cpp: (WebCore::EventTargetNode::defaultEventHandler): Call the defaultKeyboardEventHandler for keydown events.
  • page/EventHandler.cpp: (WebCore::eventTargetNodeForDocument): Return 0 instead of false since the return type in EventTargetNode. (WebCore::EventHandler::keyEvent): Removed dispatch of keypress event, since this is now done in the default event handler. (WebCore::EventHandler::defaultKeyboardEventHandler): For keydown events, create and dispatch a keypress event.
9:34 PM Changeset in webkit [19957] by ap
  • 3 edits in trunk/WebCore

Reviewed by Nikolas Zimmermann (yay!).

​http://bugs.webkit.org/show_bug.cgi?id=12962
4XPath tests crash on lang() function

Covered by 4XPath tests, to be landed later.

  • platform/StringImpl.cpp: (WebCore::StringImpl::reverseFind): Do not crash with empty strings.
  • xml/XPathFunctions.cpp: (WebCore::XPath::FunLang::doEvaluate): Do not crash when an element has no attributes. Use a proper namespace for xml:lang (not sure where "xms" came from). Rewrote the algorithm for suffix removing to match the spec.
5:33 PM Changeset in webkit [19956] by ddkilzer
  • 2 edits in trunk/JavaScriptCore

JavaScriptCore:

Reviewed by Nikolas Zimmermann.

  • wtf/Assertions.cpp: Don't #define WINVER and _WIN32_WINNT if they are already defined.
3:30 PM Changeset in webkit [19955] by andersca
  • 6 edits
    2 adds in trunk

LayoutTests:

Reviewed by Darin.

<rdar://problem/5028165>
​http://bugs.webkit.org/show_bug.cgi?id=12915
REGRESSION: XMLHttpRequest.abort() does not stop loading (12915)

  • http/tests/xmlhttprequest/abort-should-cancel-load-expected.txt: Added.
  • http/tests/xmlhttprequest/abort-should-cancel-load.html: Added.

WebCore:

Reviewed by Darin.

<rdar://problem/5028165>
​http://bugs.webkit.org/show_bug.cgi?id=12915
REGRESSION: XMLHttpRequest.abort() does not stop loading (12915)


  • loader/DocumentLoader.cpp: (WebCore::DocumentLoader::stopLoading): Save the value of m_loading since calling FrameLoader::stopLoading could set it to false.


  • loader/SubresourceLoader.cpp: (WebCore::SubresourceLoader::didCancel):
  • loader/SubresourceLoader.h: Get rid of didCancel now, it's not needed anymore.


  • xml/xmlhttprequest.cpp: (WebCore::XMLHttpRequest::abort): Call cancel() instead of stopLoading(). Also, set m_aborted to true so the XMLHttpRequest object won't be dereferenced in didFail when aborting.
1:24 PM Changeset in webkit [19954] by kjk
  • 6 edits in trunk

WebCore:

Reviewed by Nikolas Zimmermann.

Move ScrollView stubs to ScrollViewGdk.cpp

  • platform/gdk/FrameGdk.h: remove comment that no longer makes sense
  • platform/gdk/ScrollViewGdk.cpp: (WebCore::ScrollView::addChild): (WebCore::ScrollView::removeChild): (WebCore::ScrollView::scrollPointRecursively): (WebCore::ScrollView::inWindow): (WebCore::ScrollView::wheelEvent): (WebCore::ScrollView::updateScrollbars): (WebCore::ScrollView::updateScrollInfo): (WebCore::ScrollView::windowToContents): (WebCore::ScrollView::contentsToWindow): (WebCore::ScrollView::scrollbarUnderMouse):
  • platform/gdk/TemporaryLinkStubs.cpp:

WebKitTools:

Reviewed by Nikolas Zimmermann.

Load a url given on a command line in a way that also
works for local (​file://) urls.

  • GdkLauncher/main.cpp: (main):
7:47 AM Changeset in webkit [19953] by ddkilzer
  • 1 edit
    2 moves in trunk/LayoutTests

LayoutTests:

Reviewed by Nikolas Zimmermann.

Fixed spelling of "processer" to "processor" in file names.

  • fast/xsl/xslt-processer-expected.txt: Removed.
  • fast/xsl/xslt-processer.html: Removed.
  • fast/xsl/xslt-processor-expected.txt: Added. Results progressed after fixing Bugzilla Bug 12735 (<rdar://problem/4545040>).
  • fast/xsl/xslt-processor.html: Added.

Mar 2, 2007:

6:18 PM Changeset in webkit [19952] by kmccullo
  • 39 edits
    20 adds in trunk

LayoutTests:

Reviewed by Geoff.

  • rdar://problem/4922454
  • This fixes a security issue by making remote referrers not able to access local resources, unless they register their schemes to be treated as local. The result is that those schemes can access local resources and cannot be accessed by remote referrers. Because this behavior is new a link-on-or-after check is made to determine if the app should use the older, less safe, behavior.
  • fast/loader/local-CSS-from-local-expected.txt: Added.
  • fast/loader/local-CSS-from-local.html: Added.
  • fast/loader/local-JavaScript-from-local-expected.txt: Added.
  • fast/loader/local-JavaScript-from-local.html: Added.
  • fast/loader/local-iFrame-source-from-local-expected.txt: Added.
  • fast/loader/local-iFrame-source-from-local.html: Added.
  • fast/loader/local-image-from-local-expected.txt: Added.
  • fast/loader/local-image-from-local.html: Added.
  • http/tests/security/local-CSS-from-remote-expected.txt: Added.
  • http/tests/security/local-CSS-from-remote.html: Added.
  • http/tests/security/local-JavaScript-from-remote-expected.txt: Added.
  • http/tests/security/local-JavaScript-from-remote.html: Added.
  • http/tests/security/local-iFrame-from-remote-expected.txt: Added.
  • http/tests/security/local-iFrame-from-remote.html: Added.
  • http/tests/security/local-image-from-remote-expected.txt: Added.
  • http/tests/security/local-image-from-remote.html: Added.
  • http/tests/security/resources/compass.jpg: Added.
  • http/tests/security/resources/cssStyle.css: Added.
  • http/tests/security/resources/localPage.html: Added.
  • http/tests/security/resources/localScript.js: Added.

WebCore:

Reviewed by Geoff.

  • rdar://problem/4922454
  • This fixes a security issue by making remote referrers not able to access local resources, unless they register their schemes to be treated as local. The result is that those schemes can access local resources and cannot be accessed by remote referrers. Because this behavior is new a link-on-or-after check is made to determine if the app should use the older, less safe, behavior.
  • WebCore.exp: added exported functions
  • bindings/objc/DOM.mm: consolodated function to base class (-[DOMElement image]): (-[DOMElement _imageTIFFRepresentation]):
  • dom/Document.cpp: Cache the document's ability to load local resources. (WebCore::Document::Document): (WebCore::Document::setURL): (WebCore::Document::shouldBeAllowedToLoadLocalResources): (WebCore::Document::stylesheetLoaded):
  • dom/Document.h: Cache the docuent's ability to load local resources. (WebCore::Document::getPendingSheet): (WebCore::Document::isAllowedToLoadLocalResources):
  • html/HTMLImageLoader.cpp: Moved functionality into base class. (WebCore::HTMLImageLoader::updateFromElement): (WebCore::HTMLImageLoader::dispatchLoadEvent):
  • html/HTMLLinkElement.cpp: Handles null returns correctly now.
  • html/HTMLTokenizer.cpp: Moved functionality into base class. (WebCore::HTMLTokenizer::notifyFinished):
  • ksvg2/misc/SVGImageLoader.cpp: Moved functionality into base class. (WebCore::SVGImageLoader::dispatchLoadEvent):
  • loader/Cache.cpp: Checks if the cached resource can be loaded. (WebCore::Cache::requestResource):
  • loader/CachedCSSStyleSheet.cpp: Moved functionality into base class. (WebCore::CachedCSSStyleSheet::ref): (WebCore::CachedCSSStyleSheet::error):
  • loader/CachedImage.cpp: Moved functionality into base class. (WebCore::CachedImage::CachedImage):
  • loader/CachedImage.h: Moved functionality into base class. (WebCore::CachedImage::canRender):
  • loader/CachedResource.cpp: Cache if the CachedResource should be treated as local (WebCore::CachedResource::CachedResource):
  • loader/CachedResource.h: Moved functionality into base class. (WebCore::CachedResource::errorOccurred): (WebCore::CachedResource::shouldTreatAsLocal):
  • loader/CachedScript.cpp: Moved functionality into base class. (WebCore::CachedScript::CachedScript):
  • loader/CachedScript.h: Moved functionality into base class. (WebCore::CachedScript::schedule):
  • loader/CachedXBLDocument.cpp: Moved functionality into base class. (WebCore::CachedXBLDocument::error):
  • loader/CachedXSLStyleSheet.cpp: Moved functionality into base class. (WebCore::CachedXSLStyleSheet::error):
  • loader/FrameLoader.cpp: See comments for each function below. (WebCore::FrameLoader::loadSubframe): Use new canLoad. (WebCore::FrameLoader::restrictAccessToLocal): return value of linked-on-or-after check. (WebCore::FrameLoader::setRestrictAccessToLocal): set value for linked-on-or-after check. (WebCore::localSchemes): Return set of schemes that are to be treated as local. (WebCore::FrameLoader::loadPlugin): Use new canLoad. (WebCore::FrameLoader::canLoad): Now multiple functions that each do the same work but some can take advantage of the cached values, if they were computed previously. (WebCore::FrameLoader::shouldHideReferrer): Extracted out the logic to determine if the referrer should be hidden so it is only calculated when needed. (WebCore::FrameLoader::loadResourceSynchronously): No longer calls canLoad to get hideReferrer info. (WebCore::FrameLoader::registerSchemeAsLocal): Functionality to register a scheme to be treated as local. (WebCore::FrameLoader::treatURLAsLocal): Given a URL this function determines if it should be treated as local.
  • loader/FrameLoader.h: Declared functions for this security fix. See above.
  • loader/MainResourceLoader.cpp: Optized order of bools to regain performance. (WebCore::MainResourceLoader::continueAfterContentPolicy):
  • loader/SubresourceLoader.cpp: Now restricts remote from loading local resources. (WebCore::SubresourceLoader::create):
  • page/EventHandler.cpp: Moved functionality into base class. (WebCore::selectCursor):
  • platform/KURL.cpp: KURLs need to check all the registered schemes now. (WebCore::KURL::isLocalFile):
  • rendering/HitTestResult.cpp: Moved functionality into base class. (WebCore::HitTestResult::image):
  • rendering/RenderImage.cpp: Moved functionality into base class. (WebCore::RenderImage::setCachedImage): (WebCore::RenderImage::imageChanged): (WebCore::RenderImage::paint): (WebCore::RenderImage::layout): (WebCore::RenderImage::calcAspectRatioWidth): (WebCore::RenderImage::calcAspectRatioHeight):
  • rendering/RenderImage.h: Moved functionality into base class. (WebCore::RenderImage::errorOccurred):
  • rendering/RenderListItem.cpp: Moved functionality into base class. (WebCore::RenderListItem::setStyle):
  • rendering/RenderListMarker.cpp: Moved functionality into base class. (WebCore::RenderListMarker::isImage):
  • xml/xmlhttprequest.cpp: Check doc's cached value instead of determining independently. (WebCore::XMLHttpRequest::urlMatchesDocumentDomain):

WebKit:

Reviewed by Geoff.

  • rdar://problem/4922454
  • This fixes a security issue by making remote referrers not able to access local resources, unless they register their schemes to be treated as local. The result is that those schemes can access local resources and cannot be accessed by remote referrers. Because this behavior is new a link-on-or-after check is made to determine if the app should use the older, less safe, behavior.
  • Misc/WebKitVersionChecks.h: added linked-on-or-after check
  • Misc/WebNSAttributedStringExtras.mm: Moved functionalit into the base class. (fileWrapperForElement):
  • Plugins/WebNetscapePluginStream.mm: uses new canLoad functions
  • Plugins/WebPluginContainerCheck.mm: uses new canLoad functions (-[WebPluginContainerCheck _isForbiddenFileLoad]):
  • WebView/WebView.mm: make linked-on-or-after check and cache value, exposes SPI for registering a scheme as local. (-[WebView _commonInitializationWithFrameName:groupName:]): (+[WebView registerSchemeAsLocal:]):
  • WebView/WebViewPrivate.h: exposes SPI for registering a scheme as local.
5:46 PM Changeset in webkit [19951] by justing
  • 3 edits
    4 adds in trunk

LayoutTests:

Reviewed by kevin


<rdar://problem/5028447>
REGRESSION: Gmail Editor: Copied message text pastes at the wrong font size

  • editing/pasteboard/5028447-expected.checksum: Added.
  • editing/pasteboard/5028447-expected.png: Added.
  • editing/pasteboard/5028447-expected.txt: Added.
  • editing/pasteboard/5028447.html: Added.

WebCore:

Reviewed by kevin


<rdar://problem/5028447>
REGRESSION: Gmail Editor: Copied message text pastes at the wrong font size

  • editing/markup.cpp: (WebCore::createMarkup): The style of the div that holds a fully selected body's styles didn't include styles inherited from the body's ancestors.
4:48 PM Changeset in webkit [19950] by ggaren
  • 2 edits in trunk/WebKitTools

Tweaked parse-malloc-history to work with new malloc_history output format.

  • Scripts/parse-malloc-history:
4:09 PM Changeset in webkit [23020] by aroben
  • 4 edits in branches/WindowsMerge/WebKitWin

WebKitWin:

Reviewed by Beth.

Make submenus draw using the UIDelegate.

  • Interfaces/IWebUIDelegate.idl: Added new delegate method to add custom drawing data for menus.
  • WebView.cpp: (WebView::onInitMenuPopup): Added. Calls new delegate method. (WebViewWndProc): Added handler for WM_INITMENUPOPUP, which is called for all submenus.
  • WebView.h: Added declaration.
3:02 PM Changeset in webkit [19949] by justing
  • 5 edits
    4 adds in trunk

LayoutTests:

Reviewed by harrison


<rdar://problem/4545040>
innerHTML does not HTML-escape text nodes inside PRE elements
<rdar://problem/5027857>
Pasting into Mail from Safari's view-source window renders the HTML

  • editing/pasteboard/5027857-expected.checksum: Added.
  • editing/pasteboard/5027857-expected.png: Added.
  • editing/pasteboard/5027857-expected.txt: Added.
  • editing/pasteboard/5027857.html: Added.

WebCore:

Reviewed by harrison

<rdar://problem/4545040>
innerHTML does not HTML-escape text nodes inside PRE elements
<rdar://problem/5027857>
Pasting into Mail from Safari's view-source window renders the HTML

  • editing/HTMLInterchange.cpp: (WebCore::convertHTMLTextToInterchangeFormat): Send this function the node that the text comes from as a parameter. It shouldn't convert '\n's to spaces/nbsps if the text is coming from text where newlines are preserved.
  • editing/HTMLInterchange.h:
  • editing/markup.cpp: (WebCore::startMarkup): Escape text inside the children of PREs.
2:35 PM Changeset in webkit [23019] by aroben
  • 6 edits in branches/WindowsMerge

WebCoreWin:

Reviewed by Anders.

Added optional underlining of a single character to
WebCoreTextRenderer.

No layout tests possible.

  • platform/win/WebCoreTextRenderer.cpp: (WebCore::doDrawTextAtPoint): Added. This is an extraction of the code from DrawTextAtPoint that now also contains the underlining code. (WebCore::WebCoreDrawTextAtPoint): Call the helper function. (WebCore::WebCoreDrawDoubledTextAtPoint): Ditto.
  • platform/win/WebCoreTextRenderer.h: Added optional underlinedIndex parameters.

WebKitWin:

Reviewed by Anders.

Added optional underlining of a single character to WebKitGraphics.

1:10 PM Changeset in webkit [19948] by weinig
  • 4 edits in trunk

WebCore:

Reviewed by Anders.

Try to fix the Qt build.

  • platform/qt/TemporaryLinkStubs.cpp: Add stubs. (WebCore::searchMenuNoRecentSearchesText): (WebCore::searchMenuRecentSearchesText): (WebCore::searchMenuClearRecentSearchesText): (WebCore::AXWebAreaText): (WebCore::AXLinkText): (WebCore::AXListMarkerText): (WebCore::AXImageMapText): (WebCore::AXHeadingText):

WebKitQt:

Reviewed by Anders.

Try to fix the Qt build

  • WebCoreSupport/DragClientQt.cpp: (WebCore::DragClientQt::willPerformDragDestinationAction): (WebCore::DragClientQt::dragControllerDestroyed): (WebCore::DragClientQt::createDragImageForLink):
1:06 PM Changeset in webkit [19947] by sfalken
  • 2 edits in trunk/JavaScriptCore

2007-03-02 Steve Falkenburg <​sfalken@apple.com>

Reviewed by Anders.


Add unsigned int hash traits (matches existing unsigned long version)

  • wtf/HashTraits.h: (WTF::):
1:06 PM Changeset in webkit [19946] by harrison
  • 2 edits in trunk/WebCore

Suggested by Darin.

A more efficient solution to rdar://4961431.

  • bridge/mac/WebCoreAXObject.mm: (-[WebCoreAXObject accessibilityIsIgnored]):
11:55 AM Changeset in webkit [19945] by aroben
  • 4 edits in trunk/JavaScriptCore

Reviewed by Kevin M.

Try to fix the Qt build.

  • kjs/DateMath.cpp: (KJS::msToGregorianDateTime): Removed unnecessary "struct" keyword.
  • kjs/DateMath.h: Moved forward declarations to the top of the file before they are used.
  • kjs/date_object.cpp: (KJS::formatLocaleDate): Changed to take a const GregorianDateTime& since GregorianDateTime is Noncopyable.
11:53 AM Changeset in webkit [19944] by justing
  • 3 edits
    4 adds in trunk

LayoutTests:

Reviewed by john


<rdar://problem/5032095>
Gmail Editor: Copied text pastes on a new line instead of current line

  • editing/pasteboard/5032095-expected.checksum: Added.
  • editing/pasteboard/5032095-expected.png: Added.
  • editing/pasteboard/5032095-expected.txt: Added.
  • editing/pasteboard/5032095.html: Added.

WebCore:

Reviewed by john


<rdar://problem/5032095>
Gmail Editor: Copied text pastes on a new line instead of current line


Start merge failed to occur because positionAtStartOfInsertedContent
had a bug.

  • editing/ReplaceSelectionCommand.cpp: (WebCore::ReplaceSelectionCommand::positionAtStartOfInsertedContent): Was failing when inserting <span><div>foo/div></span>. Return the inserted content's first VisiblePosition.
9:42 AM Changeset in webkit [19943] by darin
  • 3 edits in trunk/JavaScriptCore

Reviewed by Kevin McCullough.

  • kjs/DateMath.h: Marked GregorianDateTime as noncopyable, since it has a non-trivial destructor and not the correspoding copy constructor or assignment operator. Changed the GregorianDateTime constructor to use member initialization syntax. Fixed the destructor to use the array delete operator, since timeZone is an array.
  • kjs/DateMath.cpp: (KJS::daysInYear): Changed to call isLeapYear so the rule is not repeated twice. (KJS::getUTCOffset): Added caching on PLATFORM(DARWIN), since we can rely on the notify_check function and "com.apple.system.timezone" to let us know when the offset has changed.
1:39 AM Changeset in webkit [19942] by hyatt
  • 2 edits in trunk/WebCore

Fix glyph map crasher.

12:22 AM Changeset in webkit [19941] by antti
  • 2 edits in trunk/WebCore

Reviewed by Maciej.

Fix for ​http://bugs.webkit.org/show_bug.cgi?id=12895
REGRESSION: imagemap: pointer cursor is shown everywhere
<rdar://problem/5028163>


Image with imagemap should never itself be URLElement in hit test results.


No layout test, cursor state can't be captured.

  • rendering/RenderLayer.cpp: (WebCore::RenderLayer::hitTest):

Mar 1, 2007:

11:59 PM Changeset in webkit [19940] by antti
  • 8 edits
    3 adds in trunk

LayoutTests:

Reviewed by Maciej.


HTTP layout test for ​http://bugs.webkit.org/show_bug.cgi?id=12690
REGRESSION: can not log in to bank of america with TOT webkit
<rdar://problem/4990044>

also for
​http://bugs.webkit.org/show_bug.cgi?id=12604
​http://bugs.webkit.org/show_bug.cgi?id=12020


  • http/tests/misc/multiple-submit-expected.txt: Added.
  • http/tests/misc/multiple-submit.html: Added.
  • http/tests/misc/resources/post-echo-and-notify-done.cgi: Added.

WebCore:

Reviewed by Maciej.


Fix ​http://bugs.webkit.org/show_bug.cgi?id=12690
REGRESSION: can not log in to bank of america with TOT webkit
<rdar://problem/4990044>


and ​http://bugs.webkit.org/show_bug.cgi?id=12604
REGRESSION: After closing the "Would you like to save password" sheet, the form fails
to submit automatically at ​http://www.mac.com/WebObjects/HomePage.woa
<rdar://problem/4871752>


and ​http://bugs.webkit.org/show_bug.cgi?id=12020
REGRESSION: Flickr uploading broken
<rdar://problem/4928662>


Turn protection against multiple forms submission back on. This approach is buggy
but it is way better than not having it at all. Not protecting against this
breaks number of major sites.


  • bridge/mac/WebCoreAXObject.mm: (-[WebCoreAXObject accessibilityPerformAction:]):
  • loader/FrameLoader.cpp: (WebCore::FrameLoader::resetMultipleFormSubmissionProtection): (WebCore::FrameLoader::submitForm): (WebCore::FrameLoader::receivedMainResourceError):
  • loader/FrameLoader.h:
  • page/EventHandler.cpp: (WebCore::EventHandler::keyEvent):
  • page/Frame.cpp: (WebCore::Frame::setView):
  • page/mac/EventHandlerMac.mm: (WebCore::EventHandler::mouseDown):
10:35 PM Changeset in webkit [19939] by bdash
  • 4 edits in tags/Safari-5522.1

Versioning.

9:26 PM Changeset in webkit [19938] by bdash
  • 2 edits in tags/Safari-5522.1/WebCore

Merge in r19928.

2007-03-01 David Harrison <​harrison@apple.com>

Reviewed by Darin.

<rdar://problem/5033905> Have the DOM secondary thread check raise an exception by default

  • platform/mac/ThreadCheck.mm: (WebCore::_WebCoreThreadViolationCheck): Initialize threadViolationIsException to true.
9:18 PM Changeset in webkit [19937] by bdash
  • 10 edits
    2 copies in tags/Safari-5522.1

Merge in r19921.

2007-02-28 Brady Eidson <​beidson@apple.com>

Reviewed by Beth

Move the Thread Safety Check functions into their own header for export to WebKit

  • WebCore.exp: Export the function
  • WebCore.xcodeproj/project.pbxproj:
  • bindings/scripts/CodeGeneratorObjC.pm: Include the new header
  • platform/Logging.h: Move stuff to ThreadCheck.h
  • platform/ThreadCheck.h: Added.
  • platform/mac/LoggingMac.mm: Move stuff to ThreadCheck.mm
  • platform/mac/ThreadCheck.mm: Added. (WebCore::_WebCoreThreadViolationCheck): (WebCoreReportThreadViolation):

2007-02-28 Brady Eidson <​beidson@apple.com>

Reviewed by Beth

Start using the Thread Safety Check implemented in WebCore for the DOM bindings in the rest of
the WebKit API instead of the ASSERT_MAIN_THREAD() hack

  • History/WebBackForwardList.mm: (-[WebBackForwardList initWithWebCoreBackForwardList:]): (-[WebBackForwardList init]): (-[WebBackForwardList dealloc]): (-[WebBackForwardList finalize]):
  • History/WebHistoryItem.mm: (-[WebHistoryItem initWithURLString:title:lastVisitedTimeInterval:]): (-[WebHistoryItem dealloc]): (-[WebHistoryItem finalize]): (-[WebHistoryItem copyWithZone:]): (-[WebHistoryItem initWithWebCoreHistoryItem:]):
  • Misc/WebIconDatabase.mm: (-[WebIconDatabase init]):
8:47 PM Changeset in webkit [19936] by bdash
  • 1 copy in tags/Safari-5522.1

New tag.

7:16 PM Changeset in webkit [23018] by sfalken
  • 1 edit in branches/WindowsMerge/WebKitWin/WebKit.vcproj/VERSION

Bump version for submit

7:13 PM Changeset in webkit [19935] by sfalken
  • 1 copy in tags/Safari-521.35.5b

New tag.

6:42 PM Changeset in webkit [19934] by kmccullo
  • 3 edits
    3 adds in trunk

LayoutTests:

Reviewed by Adam.

  • Tests that the url of a document after an open is what it was before the open.
  • fast/loader/external-script-URL-location-expected.txt: Added.
  • fast/loader/external-script-URL-location.html: Added.
  • fast/loader/resources/external-script-URL-location.js: Added.

WebCore:

Reviewed by Adam.

  • Added the test case: external-script-URL-location.html
  • Fix an issue where the url of a document is null after an open if the document has no parent.
  • dom/Document.cpp: (WebCore::Document::open):
6:29 PM Changeset in webkit [19933] by bdash
  • 3 edits in tags/Safari-4522.1

Versioning.

6:23 PM Changeset in webkit [19932] by bdash
  • 1 copy in tags/Safari-4522.1

New tag.

6:17 PM Changeset in webkit [19931] by andersca
  • 2 edits in trunk/WebCore

Reviewed by Darin.

<rdar://problem/4960250>
​http://bugs.webkit.org/show_bug.cgi?id=11627
REGRESSION: Reproducible crash at IMDb in WebCore::FrameLoader::stopLoadingSubframes


In rare cases, we could end up calling checkLoadComplete twice for the same frame. This would cause the
didFailProvisionalLoad delegate method to be called twice for the same frame, and also cause the provisional document loader
to be reset to null when other code wasn't expecting it.


This regressed in revision 10904 with the fix for <rdar://problem/4184719>. The fix is to only call stopLoading on the frame
if either the document loader is loading, or the document is still being parsed. I've verified that the bug is still fixed and
that no leaks occur.


  • loader/DocumentLoader.cpp: (WebCore::DocumentLoader::stopLoading):
5:58 PM Changeset in webkit [19930] by kjk
  • 2 edits in trunk/WebCore

Reviewed by Darin.

Fix ARM crash due to accessing non-4-byte-aligned memory
as 32-bit values.

  • platform/AtomicString.cpp: (WebCore::UCharBufferTranslator::equal):
5:57 PM Changeset in webkit [19929] by justing
  • 3 edits in trunk/WebKit

Reviewed by harrison


<rdar://problem/4838199>
Integrate Mail and WebKit paste operations


Provide subresources used to create the fragment as a
convenience.

  • WebView/WebHTMLView.mm: (-[WebHTMLView _documentFragmentFromPasteboard:inContext:allowPlainText:chosePlainText:]): Update the calls to the changed method. (-[WebHTMLView _documentFragmentFromPasteboard:forType:inContext:subresources:]): Give the caller the subresources in the WebArchive and RTF cases.
  • WebView/WebHTMLViewPrivate.h:
5:53 PM Changeset in webkit [19928] by harrison
  • 2 edits in trunk/WebCore

Reviewed by Darin.

<rdar://problem/5033905> Have the DOM secondary thread check raise an exception by default

  • platform/mac/ThreadCheck.mm: (WebCore::_WebCoreThreadViolationCheck): Initialize threadViolationIsException to true.
4:46 PM Changeset in webkit [23017] by aroben
  • 5 edits in branches/WindowsMerge/WebKitWin

Reviewed by Kevin M.

Add support for right-truncation to WebKitGraphics.

2:04 PM Changeset in webkit [23016] by andersca
  • 2 edits in branches/WindowsMerge/WebCore

Reviewed by Tim.

  • plugins/win/npfunctions.h: Fix tyop.
2:00 PM Changeset in webkit [19927] by beidson
  • 2 edits in trunk/WebCore

Reviewed by Darin

<rdar://problem/5030628> - Crash opening a new window with the
"New windows open to the same page" pref set

  • history/HistoryItem.cpp: (WebCore::HistoryItem::HistoryItem): Set the m_subItems vector capacity correctly
9:08 AM Changeset in webkit [19926] by ap
  • 3 edits
    2 adds in trunk

Reviewed by Maciej.

​http://bugs.webkit.org/show_bug.cgi?id=12801
Assertion failure in createMarkup() (root) when doing Select All, Copy in an SVG document

Test: editing/pasteboard/createMarkup-assert.xml

  • editing/markup.cpp: (WebCore::createMarkup): Removed the assertion, because it's wrong in a non-HTML world.
Note: See TracTimeline for information about the timeline view.