Closed Bug 11734 Opened 25 years ago Closed 25 years ago

Need check access calls for accesses to forms by name

Categories

(Core :: DOM: Core & HTML, defect, P2)

Product:
Core
Component:
DOM: Core & HTML
Platform:
x86
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED DUPLICATE of bug 29712

People

(Reporter: norrisboyd, Assigned: norrisboyd)

References

Details

Current CheckScriptAccess is called for references to forms through the forms
array, but not for forms accessed directly from the document object by the name
of the form. This needs to be fixed to avoid a security hole.
Blocks: 7254
HTML DOM bugs are M11/P2 for Vidur.
Target Milestone: M11 → M12
Moving to M12.
Moving off M12 radar for the time being. One or more might get back once I get a
chance to really look at them.
In an attempt to get my bug list in order again, marking all the bugs I have
currently as ASSIGNED.
Target Milestone: M13 → M15
Norris, I'm moving this out to M15. Let me know if you'd like to take it over.
Passing this one back to Norris. Norris, the call to the security manager needs 
to be put into 
http://lxr.mozilla.org/seamonkey/source/layout/html/document/src/nsHTMLDocument.
cpp#2533.
Assignee: vidur → norris
Status: ASSIGNED → NEW

*** This bug has been marked as a duplicate of 29712 ***
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
Verified Dup.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.