diff options
| author | ager@google.com <ager@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2008-11-07 08:29:55 +0000 |
|---|---|---|
| committer | ager@google.com <ager@google.com@0039d316-1c4b-4281-b951-d872f2087c98> | 2008-11-07 08:29:55 +0000 |
| commit | 8eb9e9f3027704f7337c13c522e4b8c0941e086e (patch) | |
| tree | 1456a36236ae0444803b5d1c57e7ce0c2e062060 /webkit/data | |
| parent | ca9abf489577e82c54321b6a0642911b447317db (diff) | |
| download | chromium_src-8eb9e9f3027704f7337c13c522e4b8c0941e086e.zip chromium_src-8eb9e9f3027704f7337c13c522e4b8c0941e086e.tar.gz chromium_src-8eb9e9f3027704f7337c13c522e4b8c0941e086e.tar.bz2 | |
Do not allow shadowing of location.href since that can break
frame-busting code.
Review URL: http://codereview.chromium.org/9688
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@4981 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'webkit/data')
| -rw-r--r-- | webkit/data/layout_tests/chrome/fast/dom/location-shadowing.html | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/webkit/data/layout_tests/chrome/fast/dom/location-shadowing.html b/webkit/data/layout_tests/chrome/fast/dom/location-shadowing.html index 3ef45a4..34f9b04 100644 --- a/webkit/data/layout_tests/chrome/fast/dom/location-shadowing.html +++ b/webkit/data/layout_tests/chrome/fast/dom/location-shadowing.html @@ -53,6 +53,12 @@ function testAccessorOverwrite() { this.location; } + +function testHrefOverwrite() { + location.__defineGetter__("href", failIfCalled); + location.href; +} + function testVarShadowing() { testFrame.location = "resources/location-shadowing-inner.html"; } @@ -60,6 +66,7 @@ function testVarShadowing() { function test() { testFunctionOverwrite(); testAccessorOverwrite(); + testHrefOverwrite(); testVarShadowing(); } </script> |