Current CheckScriptAccess is called for references to forms through the forms array, but not for forms accessed directly from the document object by the name of the form. This needs to be fixed to avoid a security hole.
HTML DOM bugs are M11/P2 for Vidur.
Moving to M12.
Moving off M12 radar for the time being. One or more might get back once I get a chance to really look at them.
In an attempt to get my bug list in order again, marking all the bugs I have currently as ASSIGNED.
Norris, I'm moving this out to M15. Let me know if you'd like to take it over.
Passing this one back to Norris. Norris, the call to the security manager needs to be put into http://lxr.mozilla.org/seamonkey/source/layout/html/document/src/nsHTMLDocument. cpp#2533.
Assignee: vidur → norris
Status: ASSIGNED → NEW
*** This bug has been marked as a duplicate of 29712 ***
Status: NEW → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → DUPLICATE
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.