Closed Bug 24378 Opened 25 years ago Closed 25 years ago

All DOM security checks inadvertently disabled

Categories

(Core :: Security, defect, P3)

All
Windows NT
defect

Tracking

()

VERIFIED FIXED

People

(Reporter: norrisboyd, Assigned: norrisboyd)

References

()

Details

Currently all DOM security checks have been disabled. This means form value fields, etc, can be accessed by scripts from any domain.
Status: NEW → ASSIGNED
Target Milestone: M13
I have a one-character fix. Would like to get this in M13.
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
Checking in nsScriptSecurityManager.cpp; /m/pub/mozilla/caps/src/nsScriptSecurityManager.cpp,v <-- nsScriptSecurityMana ger.cpp new revision: 1.40; previous revision: 1.39 done
Verified fixed.
Status: RESOLVED → VERIFIED
Bulk moving all Browser Security bugs to new Security: General component. The previous Security component for Browser will be deleted.
Component: Security → Security: General
You need to log in before you can comment on or make changes to this bug.