⚠ Archived content — this site is no longer maintained.   Current WebKit documentation is at docs.webkit.org.

Timeline



Jun 28, 2009:

10:24 PM Changeset in webkit [45335] by xan@webkit.org
  • 3 edits in trunk/WebKit/gtk

2009-06-28 Xan Lopez <​xlopez@igalia.com>

Fix the GTK+ build.

  • WebCoreSupport/ContextMenuClientGtk.cpp: (WebKit::ContextMenuClient::isSpeaking):
  • WebCoreSupport/ContextMenuClientGtk.h:
9:28 PM Changeset in webkit [45334] by ggaren@apple.com
  • 4 edits in branches/nitro-extreme/JavaScriptCore

2009-06-28 Geoffrey Garen <​ggaren@apple.com>

Reviewed by Sam Weinig.

Standardized op_get_by_id to put { tag, payload } in { regT1, regT0 }.


SunSpider and v8 report maybe 0.2%-0.4% regressions, but the optimization
this enables will win much more than that back.

  • jit/JIT.cpp: (JSC::JIT::privateCompileCTIMachineTrampolines):
  • jit/JIT.h:
  • jit/JITPropertyAccess.cpp: (JSC::JIT::emit_op_method_check): (JSC::JIT::emit_op_get_by_id): (JSC::JIT::compileGetByIdHotPath): (JSC::JIT::compileGetByIdSlowCase): (JSC::JIT::patchGetByIdSelf): (JSC::JIT::privateCompilePatchGetArrayLength): (JSC::JIT::privateCompileGetByIdProto): (JSC::JIT::privateCompileGetByIdSelfList): (JSC::JIT::privateCompileGetByIdProtoList): (JSC::JIT::privateCompileGetByIdChainList): (JSC::JIT::privateCompileGetByIdChain):
8:06 PM Changeset in webkit [45333] by sullivan@apple.com
  • 7 edits in trunk

WebCore:

2009-06-26 John Sullivan <​sullivan@apple.com>

Added Speech submenu to context menu on Mac when there's a non-editable selection
(it was already present when there's an editable selection).
Also added support for disabling "Stop Speaking" when there is no speaking to stop.

Reviewed by Tim Hatcher.

  • loader/EmptyClients.h: (WebCore::EmptyContextMenuClient::isSpeaking): implemented this new virtual function to return false


  • page/ContextMenuClient.h: declared this new pure virtual function


  • platform/ContextMenu.cpp: (WebCore::ContextMenu::populate): insert Speech item (after a separator) on Mac when there's selected non-editable text (WebCore::ContextMenu::checkOrEnableIfNeeded): enable Stop Speaking item only if the context menu client returns true for isSpeaking()

WebKit/mac:

2009-06-26 John Sullivan <​sullivan@apple.com>

Added support for disabling Stop Speaking when there is no speaking to stop.
Also fixed Stop Speaking so that it works (formerly it would throw an exception, and
selecting it from the menu would perform a web search instead (!)).

Reviewed by Tim Hatcher.

  • WebCoreSupport/WebContextMenuClient.h: declare isSpeaking()


  • WebCoreSupport/WebContextMenuClient.mm: (WebContextMenuClient::isSpeaking): implement by calling through to NSApplication (WebContextMenuClient::stopSpeaking): fixed implementation by correcting the signature of the NSApplication method
7:54 PM Changeset in webkit [45332] by mitz@apple.com
  • 5 edits in trunk

WebCore:

Reviewed by Simon Fraser.

Test: added a case to fast/dom/Element/scrollWidth.html

Ensure that scroll{Width, Height} is greater or equal to
client{Width, Height}.

  • rendering/RenderBox.cpp: (WebCore::RenderBox::scrollWidth): (WebCore::RenderBox::scrollHeight):

LayoutTests:

Reviewed by Simon Fraser.

  • fast/dom/Element/scrollWidth-expected.txt:
  • fast/dom/Element/scrollWidth.html:
3:06 PM Changeset in webkit [45331] by mrowe@apple.com
  • 4 edits in branches/WWDC-2009-branch

Versioning.

10:25 AM Changeset in webkit [45330] by Simon Fraser
  • 5 edits
    5 adds in trunk

2009-06-27 Simon Fraser <Simon Fraser>

Reviewed by Eric Seidel.

​https://bugs.webkit.org/show_bug.cgi?id=26780

Do not make compositing layers for non-self-painting RenderLayers,
since these exist only to push a clip onto the clipping stack. If such
a layer gets compositied for some other reason, it should not paint.

Also ensure that we update composited layer positions correctly
inside overflow:scroll layers. We can't assume that the contents
are child layers, so we have to go up to the compositing ancestor,
and tell it to update all its child layer positions as we do
after layout.

Tests: compositing/layers-inside-overflow-scroll.html

compositing/self-painting-layers.html

  • rendering/RenderLayer.cpp: (WebCore::RenderLayer::scrollToOffset):
  • rendering/RenderLayerBacking.cpp: (WebCore::RenderLayerBacking::paintIntoLayer):
  • rendering/RenderLayerCompositor.cpp: (WebCore::RenderLayerCompositor::calculateCompositedBounds): (WebCore::RenderLayerCompositor::needsToBeComposited):
5:40 AM Changeset in webkit [45329] by jmalonzo@webkit.org
  • 2 edits in trunk/WebKit/qt

2009-06-28 Sriram Yadavalli <​sriram.yadavalli@nokia.com>

Reviewed by Eric Seidel.

[Qt] Fix build break for Qt
​https://bugs.webkit.org/show_bug.cgi?id=26779

  • Api/qwebpage.cpp: (QWebPage::swallowContextMenuEvent):
4:58 AM Changeset in webkit [45328] by jmalonzo@webkit.org
  • 2 edits in trunk/WebKitTools

2009-06-28 Jan Michael Alonzo <​jmalonzo@webkit.org>

Gtk build fix - include stdarg.h for va_start/va_end.

  • DumpRenderTree/TestNetscapePlugIn.subproj/PluginObject.cpp:
4:15 AM Changeset in webkit [45327] by eric@webkit.org
  • 2 edits in trunk/WebCore

2009-06-28 Luke Kenneth Casson Leighton <​lkcl@lkcl.net>

Reviewed by Eric Seidel.

PurgeableBuffer #defines leave out functions on gtk MacOSX 10.4 build
​https://bugs.webkit.org/show_bug.cgi?id=23057

Define these functions for Gtk as well.

  • platform/PurgeableBuffer.h:
4:14 AM Changeset in webkit [45326] by eric@webkit.org
  • 2 edits in trunk/WebCore

2009-06-28 Nate Chapin <Nate Chapin>

Reviewed by Dimitri Glazkov.

Update CodeGeneratorV8.pm to match the new api for V8Proxy.

​https://bugs.webkit.org/show_bug.cgi?id=26765

  • bindings/scripts/CodeGeneratorV8.pm: Match the current version of V8Proxy.
4:13 AM Changeset in webkit [45325] by eric@webkit.org
  • 5 edits in trunk/WebCore

2009-06-28 Nicolas Sylvain <​nsylvain@chromium.org>

Reviewed by Dimitri Glazkov.

If loading a font fails because of the sandbox, we ask the browser process to
try to load it by calling ensureFontLoaded. If it still fails after
ensureFontLoaded, we hit a ASSERT_NOT_REACHED.

This case happens once in a while during browser shutdown. The browser will
queue a message to the renderer to shutdown, and will then stop answering sync
messages from the renderer. If the renderer is still loading a page during this
time, it might try to call the browser process to ask to load a font. The
browser process will ignore the request, and the font will fail to load, even
after the second try.

This is unfortunate, but there is no real risk here, since the renderer will be
going away as soon as it processes another message.

This can't be layout tested as it depends on the sandbox.

​https://bugs.webkit.org/show_bug.cgi?id=26743

  • platform/graphics/chromium/FontChromiumWin.cpp:
  • platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:
  • platform/graphics/chromium/GlyphPageTreeNodeChromiumWin.cpp:
  • platform/graphics/chromium/SimpleFontDataChromiumWin.cpp:
3:31 AM Changeset in webkit [45324] by eric@webkit.org
  • 8 edits
    2 adds in trunk

2009-06-28 John Abd-El-Malek <​jam@chromium.org>

​https://bugs.webkit.org/show_bug.cgi?id=15457

Layout tests to ensure that "src" paramater is added when it's missing
but "data" is present.

  • plugins/netscape-plugin-map-data-to-src-expected.txt: Added.
  • plugins/netscape-plugin-map-data-to-src.html: Added.

2009-06-28 John Abd-El-Malek <​jam@chromium.org>

Reviewed by Eric Seidel.

​https://bugs.webkit.org/show_bug.cgi?id=15457

Test: plugins/netscape-plugin-map-data-to-src.html

Fix problems with Real or WMP plugins not displaying because "data" was set
on the OBJECT tag instead of "src". This is based on what Firefox does, see
​http://mxr.mozilla.org/mozilla-central/source/layout/generic/nsObjectFrame.cpp#3045

  • rendering/RenderPartObject.cpp: (WebCore::mapDataParamToSrc): (WebCore::RenderPartObject::updateWidget):

2009-06-28 John Abd-El-Malek <​jam@chromium.org>

​https://bugs.webkit.org/show_bug.cgi?id=15457

Modify NPAPI test plugin to verify that "src" paramater is added when
it's missing but "data" is present.

  • DumpRenderTree/TestNetscapePlugIn.subproj/PluginObject.cpp: (pluginLog):
  • DumpRenderTree/TestNetscapePlugIn.subproj/PluginObject.h:
  • DumpRenderTree/TestNetscapePlugIn.subproj/main.cpp: (NPP_New): (NPP_Destroy): (NPP_SetWindow): (handleEventCarbon): (handleEventCocoa):
  • DumpRenderTree/win/TestNetscapePlugin/main.cpp: (NPP_New):
3:19 AM Changeset in webkit [45323] by eric@webkit.org
  • 2 edits in trunk/LayoutTests

2009-06-28 Eric Seidel <​eric@webkit.org>

No review. Just updating test results Kevin seems to have missed.

Test failure started with:
​http://trac.webkit.org/changeset/45287
The new results definitely look better.

  • fast/profiler/profile-with-no-title-expected.txt:
2:36 AM Changeset in webkit [45322] by jmalonzo@webkit.org
  • 1 edit
    2 adds in trunk/WebKit/gtk/po

2009-06-28 Miloš Popović <​gpopac@gmail.com>

Rubber-stamped by Jan Alonzo.

New Serbian translation.

Jun 27, 2009:

11:05 PM Changeset in webkit [45321] by Simon Fraser
  • 2 edits in trunk/WebCore

2009-06-27 Simon Fraser <Simon Fraser>

Reviewed by Dan Bernstein.

​https://bugs.webkit.org/show_bug.cgi?id=26780

Fix up previous change. When computeCompositingRequirements() determines
that the current layer is composited, it needs to inform its parent
by setting compositingState.m_subtreeIsCompositing() to true. That didn't
always happen after the previous patch. Clarified the logic here.

  • rendering/RenderLayerCompositor.cpp: (WebCore::CompositingState::CompositingState): (WebCore::RenderLayerCompositor::computeCompositingRequirements):
10:54 PM Changeset in webkit [45320] by jmalonzo@webkit.org
  • 2 edits in trunk/WebCore

2009-06-27 Laszlo Gombos <Laszlo Gombos>

Reviewed by Jan Alonzo.

[Qt] Build fix after r45290
​https://bugs.webkit.org/show_bug.cgi?id=26769

  • WebCore.pro:
10:54 PM Changeset in webkit [45319] by jmalonzo@webkit.org
  • 4 edits in trunk

2009-06-27 Emilio Pozuelo Monfort <​pochu27@gmail.com>

Reviewed by Jan Alonzo.

[GTK] Don't use deprecated GTK+ symbols.
​https://bugs.webkit.org/show_bug.cgi?id=26583

  • plugins/gtk/gtk2xtbin.c: (gtk_xtbin_class_init): (gtk_xtbin_new): (gtk_xtbin_destroy):
  • GtkLauncher/main.c: (create_toolbar):
9:38 PM Changeset in webkit [45318] by Simon Fraser
  • 2 edits in trunk/WebCore

2009-06-27 Simon Fraser <Simon Fraser>

Reviewed by Dan Bernstein.

​https://bugs.webkit.org/show_bug.cgi?id=26780

First part: fix the RenderLayer::hasCompositingDescendant() flag to be set
correctly.

  • rendering/RenderLayerCompositor.cpp: (WebCore::RenderLayerCompositor::computeCompositingRequirements): Do not unconditionally set compositingState.m_subtreeIsCompositing, because that can clobber the value from an earlier sibling. Add some more comments.

Remove a final use of Vector iterators.

(WebCore::RenderLayerCompositor::recursiveRepaintLayerRect):
Move the normalFlowList() processing outside the test for isStackingContext().

9:19 PM Changeset in webkit [45317] by mitz@apple.com
  • 10 edits in trunk/WebCore

Reviewed by Simon Fraser and Antti Koivisto.

  • make paintFillLayerExtended() non-virtual and remove its clipY and clipH parameters

These parameters were computed and passed along to
paintFillLayerExtended in order to vertically constrain the rect fill to
the damage rect, because Qt cannot paint tall rectangles (see
<​http://websvn.kde.org/?view=rev&revision=42721>). Since the damage rect
is passed along in the PaintInfo, the extra parameters are redundant,
and the intersection can just take place in paintFillLayerExtended().

  • rendering/InlineFlowBox.cpp: (WebCore::InlineFlowBox::paintFillLayers): (WebCore::InlineFlowBox::paintFillLayer): (WebCore::InlineFlowBox::paintBoxDecorations): (WebCore::InlineFlowBox::paintMask):
  • rendering/InlineFlowBox.h:
  • rendering/RenderBox.cpp: (WebCore::RenderBox::paintRootBoxDecorations): (WebCore::RenderBox::paintBoxDecorations): (WebCore::RenderBox::paintMask): (WebCore::RenderBox::paintMaskImages): (WebCore::RenderBox::paintFillLayers): (WebCore::RenderBox::paintFillLayer):
  • rendering/RenderBox.h:
  • rendering/RenderBoxModelObject.cpp: (WebCore::RenderBoxModelObject::paintFillLayerExtended):
  • rendering/RenderBoxModelObject.h:
  • rendering/RenderFieldset.cpp: (WebCore::RenderFieldset::paintBoxDecorations): (WebCore::RenderFieldset::paintMask):
  • rendering/RenderTable.cpp: (WebCore::RenderTable::paintBoxDecorations): (WebCore::RenderTable::paintMask):
  • rendering/RenderTableCell.cpp: (WebCore::RenderTableCell::paintBackgroundsBehindCell): (WebCore::RenderTableCell::paintMask):
8:13 PM Changeset in webkit [45316] by bfulgham@webkit.org
  • 6 edits
    22 adds in trunk

WebCore:

2009-06-27 Ryosuke Niwa <​rniwa@google.com>

Reviewed by Eric Seidel.

​https://bugs.webkit.org/show_bug.cgi?id=26762

Clean up for IndentOutdentCommand::indentRegion, and solved most of problems related to the bug 21712.
​https://bugs.webkit.org/show_bug.cgi?id=21712

Added few utility functions to htmlediting.h/cpp

isVisibilyAdjacent checks whether the first position is visibly next to the second position.
i.e. there is no visible node between the first and second positions

canMergeLists checks whether two lists can be merged.
It checks the type of list, the editing boundary, and adjacency of the lists.

Tests: editing/execCommand/indent-nested-lists-1.html

editing/execCommand/indent-nested-lists-2.html
editing/execCommand/indent-nested-lists-3.html
editing/execCommand/indent-nested-lists-4.html
editing/execCommand/indent-nested-lists-5.html
editing/execCommand/indent-nested-lists-6.html
editing/execCommand/indent-nested-lists-7.html
editing/execCommand/outdent-nested-lists-1.html
editing/execCommand/outdent-nested-lists-2.html
editing/execCommand/outdent-nested-lists-3.html
editing/execCommand/outdent-nested-lists-4.html

  • editing/IndentOutdentCommand.cpp: (WebCore::IndentOutdentCommand::prepareBlockquoteLevelForInsertion): (WebCore::IndentOutdentCommand::tryIndentingAsListItem): (WebCore::IndentOutdentCommand::indentIntoBlockquote): (WebCore::IndentOutdentCommand::indentRegion):
  • editing/IndentOutdentCommand.h:
  • editing/htmlediting.cpp: (WebCore::enclosingListChild): (WebCore::canMergeLists): (WebCore::isVisibilyAdjacent):
  • editing/htmlediting.h:

LayoutTests:

2009-06-27 Ryosuke Niwa <set EMAIL_ADDRESS environment variable>

Reviewed by Eric Seidel.

​https://bugs.webkit.org/show_bug.cgi?id=26762

Clean up for IndentOutdentCommand::indentRegion, and solved most of problems related to the bug 21712.
​https://bugs.webkit.org/show_bug.cgi?id=21712


The following test cases are intended for 21712, but included here
since this patch already solved a lot of problems.

  • editing/execCommand/indent-nested-lists-1-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-1.html: Added.
  • editing/execCommand/indent-nested-lists-2-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-2.html: Added.
  • editing/execCommand/indent-nested-lists-3-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-3.html: Added.
  • editing/execCommand/indent-nested-lists-4-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-4.html: Added.
  • editing/execCommand/indent-nested-lists-5-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-5.html: Added.
  • editing/execCommand/indent-nested-lists-6-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-6.html: Added.
  • editing/execCommand/indent-nested-lists-7-expected.txt: Added.
  • editing/execCommand/indent-nested-lists-7.html: Added.
  • editing/execCommand/outdent-nested-lists-1-expected.txt: Added.
  • editing/execCommand/outdent-nested-lists-1.html: Added.
  • editing/execCommand/outdent-nested-lists-2-expected.txt: Added.
  • editing/execCommand/outdent-nested-lists-2.html: Added.
  • editing/execCommand/outdent-nested-lists-3-expected.txt: Added.
  • editing/execCommand/outdent-nested-lists-3.html: Added.
  • editing/execCommand/outdent-nested-lists-4-expected.txt: Added.
  • editing/execCommand/outdent-nested-lists-4.html: Added.
7:31 PM Changeset in webkit [45315] by bfulgham@webkit.org
  • 2 edits in trunk/WebCore

2009-06-27 Pavel Feldman <​pfeldman@chromium.org>

Reviewed by Timothy Hatcher.

WebInspector: Fix completion when iterating options using Tab.

​https://bugs.webkit.org/show_bug.cgi?id=26722

  • inspector/front-end/TextPrompt.js: (WebInspector.TextPrompt.prototype._completionsReady):
5:32 PM Changeset in webkit [45314] by abarth@webkit.org
  • 1 edit
    33 adds in trunk/LayoutTests

2009-06-27 Daniel Bates <​dbates@intudata.com>

Reviewed by Adam Barth.


​https://bugs.webkit.org/show_bug.cgi?id=26776


More tests for the XSSAuditor.

  • http/tests/security/xssAuditor/anchor-url-dom-write-location-expected.txt: Added.
  • http/tests/security/xssAuditor/anchor-url-dom-write-location-inline-event-expected.txt: Added.
  • http/tests/security/xssAuditor/anchor-url-dom-write-location-inline-event.html: Added.
  • http/tests/security/xssAuditor/anchor-url-dom-write-location-javascript-URL-expected.txt: Added.
  • http/tests/security/xssAuditor/anchor-url-dom-write-location-javascript-URL.html: Added.
  • http/tests/security/xssAuditor/anchor-url-dom-write-location.html: Added.
  • http/tests/security/xssAuditor/dom-write-URL-expected.txt: Added.
  • http/tests/security/xssAuditor/dom-write-URL.html: Added.
  • http/tests/security/xssAuditor/dom-write-innerHTML-expected.txt: Added.
  • http/tests/security/xssAuditor/dom-write-innerHTML.html: Added.
  • http/tests/security/xssAuditor/dom-write-location-expected.txt: Added.
  • http/tests/security/xssAuditor/dom-write-location-inline-event-expected.txt: Added.
  • http/tests/security/xssAuditor/dom-write-location-inline-event.html: Added.
  • http/tests/security/xssAuditor/dom-write-location-javascript-URL-expected.txt: Added.
  • http/tests/security/xssAuditor/dom-write-location-javascript-URL.html: Added.
  • http/tests/security/xssAuditor/dom-write-location.html: Added.
  • http/tests/security/xssAuditor/faux-script1-expected.txt: Added.
  • http/tests/security/xssAuditor/faux-script1.html: Added.
  • http/tests/security/xssAuditor/faux-script2-expected.txt: Added.
  • http/tests/security/xssAuditor/faux-script2.html: Added.
  • http/tests/security/xssAuditor/faux-script3-expected.txt: Added.
  • http/tests/security/xssAuditor/faux-script3.html: Added.
  • http/tests/security/xssAuditor/get-from-iframe-expected.txt: Added.
  • http/tests/security/xssAuditor/get-from-iframe.html: Added.
  • http/tests/security/xssAuditor/malformed-HTML-expected.txt: Added.
  • http/tests/security/xssAuditor/malformed-HTML.html: Added.
  • http/tests/security/xssAuditor/post-from-iframe-expected.txt: Added.
  • http/tests/security/xssAuditor/post-from-iframe.html: Added.
  • http/tests/security/xssAuditor/resources/anchor-url-dom-write-location-click.html: Added.
  • http/tests/security/xssAuditor/resources/echo-dom-write-URL.html: Added.
  • http/tests/security/xssAuditor/resources/echo-dom-write-innerHTML.html: Added.
  • http/tests/security/xssAuditor/resources/echo-dom-write-location.html: Added.
  • http/tests/security/xssAuditor/resources/utilities.js: Added. (sendRequestFromIFrame):
2:38 PM Changeset in webkit [45313] by kov@webkit.org
  • 3 edits in trunk/WebCore

2009-06-27 Gustavo Noronha Silva <Gustavo Noronha Silva>

Reviewed by Holger Freyther.

​https://bugs.webkit.org/show_bug.cgi?id=25889
[GTK] scrollbar policy for main frame is not implementable

Override visibleContentRect to handle GTK+'s case, in which
scrollbars or equivalent decoration are painted by the parent
widget.

  • platform/ScrollView.cpp:
  • platform/gtk/ScrollViewGtk.cpp: (WebCore::ScrollView::visibleContentRect):
12:36 PM Changeset in webkit [45312] by abarth@webkit.org
  • 7 edits
    9 adds in trunk

WebCore:

2009-06-27 Daniel Bates <​dbates@intudata.com>

Reviewed by Adam Barth.

​https://bugs.webkit.org/show_bug.cgi?id=26708


Fix addresses false negatives with respect to scheme relative paths, iFrame JavaScript URLs,
and UTF-7 encoded payloads.

Tests: http/tests/security/xssAuditor/http-equiv-utf-7-encoded.html

http/tests/security/xssAuditor/iframe-javascript-url.html
http/tests/security/xssAuditor/script-tag-utf-7-encoded.html
http/tests/security/xssAuditor/script-tag-with-source-relative-scheme.html

  • html/HTMLTokenizer.cpp: (WebCore::HTMLTokenizer::scriptHandler): Moved XSSAuditor check to HTMLTokenizer::parseTag. (WebCore::HTMLTokenizer::parseTag):
  • loader/FrameLoader.cpp: (WebCore::FrameLoader::loadSubframe): Modified to inform XSSAuditor of parent frame so as to compare against iFrame javascript URL.
  • page/XSSAuditor.cpp: Removed method XSSAuditor::isControlCharacter. Instead, exposed method isControlCharacter in ResourceResponseBase.cpp. (WebCore::XSSAuditor::XSSAuditor): (WebCore::XSSAuditor::decodeURL): Modified to decode string using specified encoder. (WebCore::XSSAuditor::findInRequest): Generalized to arbitrary frame so as to prevent execution of iFrame javascript URL.
  • page/XSSAuditor.h: Added field m_parentFrame.
  • platform/network/ResourceResponseBase.cpp: (WebCore::isControlCharacter):
  • platform/network/ResourceResponseBase.h:

LayoutTests:

2009-06-27 Daniel Bates <​dbates@intudata.com>

Reviewed by Adam Barth.

Tests for ​https://bugs.webkit.org/show_bug.cgi?id=26708

Tests prevention of injected scripts with scheme relative paths, iFrame JavaScript URLs,
and UTF-7 encoding.

  • http/tests/security/xssAuditor/http-equiv-utf-7-encoded-expected.txt: Added.
  • http/tests/security/xssAuditor/http-equiv-utf-7-encoded.html: Added.
  • http/tests/security/xssAuditor/iframe-javascript-url-expected.txt: Added.
  • http/tests/security/xssAuditor/iframe-javascript-url.html: Added.
  • http/tests/security/xssAuditor/resources/echo-intertag-default-encode.pl: Added.
  • http/tests/security/xssAuditor/script-tag-utf-7-encoded-expected.txt: Added.
  • http/tests/security/xssAuditor/script-tag-utf-7-encoded.html: Added.
  • http/tests/security/xssAuditor/script-tag-with-source-relative-scheme-expected.txt: Added.
  • http/tests/security/xssAuditor/script-tag-with-source-relative-scheme.html: Added.
1:34 AM Changeset in webkit [45311] by oliver@apple.com
  • 4 edits
    2 adds in trunk

Bug 26771: Canvas is incorrectly tainted when drawing from a video element that uses <source> elements

Reviewed by Maciej Stachowiak.

The drawImage(<video>) logic naively assumes that it just needs
to check the src attribute of the video element when in fact it
needs to look at the url that is being played instead. Failure
to do this means that video provided through source elements
taints the canvas.

Test: media/video-canvas-source.html

12:34 AM Changeset in webkit [45310] by Simon Hausmann
  • 2 edits in trunk/WebKit/qt

2009-06-27 Simon Hausmann <​simon.hausmann@nokia.com>

Build fix for Qt under Windows.

  • Api/qwebhistory.h: Use consistent export linkage for the datastream operators.
Note: See TracTimeline for information about the timeline view.