Closed Bug 664737 Opened 14 years ago Closed 13 years ago

history.next is only protected by CAPS prefs

Categories

(Core :: DOM: Core & HTML, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla12
Tracking Status
firefox-esr10 --- wontfix

People

(Reporter: bzbarsky, Assigned: mrbkap)

References

Details

(Whiteboard: [sg:nse])

Attachments

(1 file)

Bug 619359 added security checks to GetCurrent and GetPrevious but NOT GetNext. It's ok for now because this is not quickstubbed and CAPS saves us, but was there a reason to not add the security check to GetNext?
Hmm, not that I can think of... Blake?
Assignee: nobody → mrbkap
Whiteboard: [sg:nse]
Ick, I must have missed that somehow.
Attached patch FixSplinter Review
Attachment #590692 - Flags: review?(bzbarsky)
Attachment #590692 - Flags: review?(bzbarsky) → review+
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla12
Group: core-security
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: