Need check access calls for accesses to forms by name

VERIFIED DUPLICATE of bug 29712

Status

()

P2
normal
VERIFIED DUPLICATE of bug 29712
20 years ago
2 years ago

People

(Reporter: norrisboyd, Assigned: norrisboyd)

Tracking

Trunk
x86
Windows NT
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Assignee)

Description

20 years ago
Current CheckScriptAccess is called for references to forms through the forms
array, but not for forms accessed directly from the document object by the name
of the form. This needs to be fixed to avoid a security hole.
(Assignee)

Updated

20 years ago
Blocks: 7254
HTML DOM bugs are M11/P2 for Vidur.
Target Milestone: M11 → M12
Moving to M12.

Comment 3

19 years ago
Moving off M12 radar for the time being. One or more might get back once I get a
chance to really look at them.

Comment 4

19 years ago
In an attempt to get my bug list in order again, marking all the bugs I have
currently as ASSIGNED.

Updated

19 years ago
Target Milestone: M13 → M15

Comment 5

19 years ago
Norris, I'm moving this out to M15. Let me know if you'd like to take it over.

Comment 6

19 years ago
Passing this one back to Norris. Norris, the call to the security manager needs 
to be put into 
http://lxr.mozilla.org/seamonkey/source/layout/html/document/src/nsHTMLDocument.
cpp#2533.
Assignee: vidur → norris
Status: ASSIGNED → NEW
(Assignee)

Comment 7

19 years ago

*** This bug has been marked as a duplicate of 29712 ***
Status: NEW → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → DUPLICATE

Comment 8

19 years ago
Verified Dup.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.