304459 - Object.prototype leaks from document to document after splitwindow changes.

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Johnny Stenback (:jst)]

As reported in bug 304423 by [e-mail], we now leak
Object.prototype from document to document. This was caused by the splitwindow
landing.

Comment 1

[shutdown]

From bug 304423:
> And something that might be related to the above:
> 1. load http://www.mozilla.org/
> 2. load javascript: Object.prototype.x="oops"; void 0;
> 3. load http://www.google.com/intl/en/
> 4. load javascript: alert(x);
> build 20050730 => "Error: x is not defined" in JS console
> build 20050811 => alerts "oops"

Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.9a1) Gecko/20050816 Firefox/1.0+
javascript: alert(x); // step 4
=> "Error: x is not defined" in JS console
javascript: alert(window.x);
=> alerts "oops"

Something has changed between 20050811 and 20050816.

Comment 2

[Johnny Stenback (:jst)]

Yeah, we changed where javascript: URLs are evaluated, they're now evaluated in
the inner window's scope which made this less apparent. The problem is still
there tho...

Comment 3

[Johnny Stenback (:jst)]

The fix for this is now in bug 303981 (only because the same code has to be
moved to fix both bugs...).

Comment 4

[Johnny Stenback (:jst)]

Fixed by the fix in bug 303981.