Changeset 67100 in webkit
- Timestamp:
- Sep 9, 2010 11:46:14 AM (14 years ago)
- Location:
- trunk
- Files:
-
- 9 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/LayoutTests/ChangeLog
r67098 r67100 1 2010-09-09 Robert Hogan <robert@webkit.org> 2 3 Reviewed by Adam Barth. 4 5 Give WebKit clients a way to replace window.screen to 6 foil attempts to track users with it 7 8 This allows clients to overload the values returned by the 9 Screen object through the JSC manipulation API (such as 10 QWebFrame::addToJavaScriptWindowObject() in Qt). Clients will 11 want to do this when they do not want to reveal too much 12 explicit information about the user's desktop configuration. 13 14 https://bugs.webkit.org/show_bug.cgi?id=41802 15 16 * fast/dom/Window/window-property-shadowing-expected.txt: 17 * fast/dom/Window/window-property-shadowing.html: 18 * fast/js/sputnik/Conformance/08_Types/8.6_The_Object_Type/8.6.2_Internal_Properties_and_Methods/S8.6.2_A5_T1-expected.txt: 19 * fast/js/var-declarations-shadowing-expected.txt: 20 * fast/js/var-declarations-shadowing.html: 21 * http/tests/security/cross-frame-access-put-expected.txt: 22 1 23 2010-09-09 Dean Jackson <dino@apple.com> 2 24 -
trunk/LayoutTests/fast/dom/Window/window-property-shadowing-expected.txt
r29428 r67100 16 16 PASS: navigator successfully shadowed 17 17 PASS: clientInformation successfully shadowed 18 PASS: screen successfully shadowed 18 19 PASS: offscreenBuffering successfully shadowed 19 20 PASS: opener successfully shadowed -
trunk/LayoutTests/fast/dom/Window/window-property-shadowing.html
r29590 r67100 50 50 var clientInformation = 1; 51 51 log(clientInformation == 1 ? "PASS: clientInformation successfully shadowed" : "FAIL: clientInformation was not shadowed"); 52 var screen = 1; 53 log(screen == 1 ? "PASS: screen successfully shadowed" : "FAIL: screen was not shadowed"); 52 54 var offscreenBuffering = 2; 53 55 log(offscreenBuffering == 2 ? "PASS: offscreenBuffering successfully shadowed" : "FAIL: offscreenBuffering was not shadowed"); -
trunk/LayoutTests/fast/js/sputnik/Conformance/08_Types/8.6_The_Object_Type/8.6.2_Internal_Properties_and_Methods/S8.6.2_A5_T1-expected.txt
r58534 r67100 1 1 S8.6.2_A5_T1 2 2 3 FAIL TypeError: Result of expression 'screen.touch' [undefined] is not a function. 3 PASS 4 4 5 5 TEST COMPLETE -
trunk/LayoutTests/fast/js/var-declarations-shadowing-expected.txt
r29428 r67100 81 81 PASS: defaultstatus == marker should be true and is. 82 82 PASS: eval('defaultstatus == marker') should be true and is. 83 PASS: screen == marker should be true and is. 84 PASS: eval('screen == marker') should be true and is. 83 85 ----- 84 PASS: screen == marker should be false and is.85 PASS: eval('screen == marker') should be false and is.86 86 PASS: history == marker should be false and is. 87 87 PASS: eval('history == marker') should be false and is. -
trunk/LayoutTests/fast/js/var-declarations-shadowing.html
r29428 r67100 254 254 shouldBe(eval('defaultstatus == marker'), "eval('defaultstatus == marker')", true); 255 255 256 try { 257 eval("var screen = marker"); 258 } catch(e) { } 259 shouldBe(screen == marker, "screen == marker", true); 260 shouldBe(eval('screen == marker'), "eval('screen == marker')", true); 261 256 262 log("-----"); 257 258 try {259 eval("var screen = marker");260 } catch(e) { }261 shouldBe(screen == marker, "screen == marker", false);262 shouldBe(eval('screen == marker'), "eval('screen == marker')", false);263 263 264 264 try { -
trunk/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt
r61599 r67100 1 1 CONSOLE MESSAGE: line 1: Unsafe JavaScript attempt to access frame with URL http://127.0.0.1:8000/security/cross-frame-access-put.html from frame with URL http://localhost:8000/security/resources/cross-frame-iframe-for-put-test.html. Domains, protocols and ports must match. 2 3 CONSOLE MESSAGE: line 1: Unsafe JavaScript attempt to access frame with URL http://localhost:8000/security/resources/cross-frame-iframe-for-put-test.html from frame with URL http://127.0.0.1:8000/security/cross-frame-access-put.html. Domains, protocols and ports must match. 2 4 3 5 CONSOLE MESSAGE: line 1: Unsafe JavaScript attempt to access frame with URL http://localhost:8000/security/resources/cross-frame-iframe-for-put-test.html from frame with URL http://127.0.0.1:8000/security/cross-frame-access-put.html. Domains, protocols and ports must match. -
trunk/WebCore/ChangeLog
r67099 r67100 1 2010-09-09 Robert Hogan <robert@webkit.org> 2 3 Reviewed by Adam Barth. 4 5 Give WebKit clients a way to replace window.screen 6 to foil attempts to track users with it. 7 8 This allows clients to overload the values returned by the 9 Screen object through the JSC manipulation API (such as 10 QWebFrame::addToJavaScriptWindowObject() in Qt). Clients will 11 want to do this when they do not want to reveal too much 12 explicit information about the user's desktop configuration. 13 14 https://bugs.webkit.org/show_bug.cgi?id=41802 15 16 * page/DOMWindow.idl: 17 1 18 2010-09-09 Kenneth Russell <kbr@google.com> 2 19 -
trunk/WebCore/page/DOMWindow.idl
r66802 r67100 45 45 ] DOMWindow { 46 46 // DOM Level 0 47 readonly attributeScreen screen;47 attribute [Replaceable] Screen screen; 48 48 readonly attribute [DoNotCheckDomainSecurity, JSCCustomGetter] History history; 49 49 attribute [Replaceable] BarInfo locationbar;
Note: See TracChangeset
for help on using the changeset viewer.