Closed
Bug 241633
Opened 21 years ago
Closed 18 years ago
document.write doesn't copy document.domain
Categories
(Core :: Security, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jruderman, Assigned: dveditz)
Details
(Keywords: testcase)
Attachments
(1 file)
|
314 bytes,
text/html
|
Details |
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a) Gecko/20040423
Firefox/0.8.0+
Steps to repro:
1. Load the testcase
2. Clickthe button.
Result: new window saying "foo", then a security error.
Expected: new window saying "foobar".
This breaks many bookmarklets, including "view scripts" and "edit styles", at
http://search.ebay.com/search/search.dll?cgiurl=http%3A%2F%2Fcgi.ebay.com%2Fws%2F&krd=1&from=R8&MfcISAPICommand=GetResult&ht=1&SortProperty=MetaEndSort&query=foo
I think this is not a security hole.
|
Reporter | |
Comment 1•21 years ago
|
||
|
|
Reporter | |
Updated•21 years ago
|
Group: security
|
Assignee | |
Comment 2•20 years ago
|
||
testcase WFM on the trunk, writes "foo" then gets an exception in Firefox 1.0.6
Can we close it based on trunk behavior? Or should we try to figure out what
"fixed" it?
Assignee: security-bugs → dveditz
|
|
Reporter | |
Comment 3•18 years ago
|
||
WFM.
Status: NEW → RESOLVED
Closed: 18 years ago
Flags: in-testsuite?
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•