683806 - Security manager asserts when setting location.href via web console

Status: RESOLVED WORKSFORME

(Core :: Security: CAPS, defect)

Description

[Boris Zbarsky [:bzbarsky]]

BUILD: Current trunk debug nightly

STEPS TO REPRODUCE:
1)  Start browser
2)  Load about:blank
3)  Open Web Console (Accel-Shift-K)
4)  Type the following:

  var f = document.createElement("frame");
  document.body.appendChild(f); 
  f.contentWindow.location.href = "data:text/html,aaa"

EXPECTED RESULTS: no asserts

ACTUAL RESULTS: ###!!! ASSERTION: Uh, cx is not the current JS context!: 'cx == GetCurrentJSContext()', file ../../../mozilla/caps/src/nsScriptSecurityManager.cpp, line 396

Comment 1

[Blake Kaplan (:mrbkap) (inactive)]

Bobby, I'm 99% sure that your recent patches fixed this.

Comment 2

[Bobby Holley (:bholley)]

I don't have an old build lying around to do a before-after comparison, but I don't see this on a recent build since bug 834732 landed.