Skip to content
Permalink
Browse files
[e] (0) browsing contexts don't have origins... these should have bee…
…n referring to the active document.

Fixing http://www.w3.org/Bugs/Public/show_bug.cgi?id=8973

git-svn-id: http://svn.whatwg.org/webapps@4774 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed Feb 18, 2010
1 parent 685fc28 commit a1f5dd287571493430f507a07894e3925010c289
Show file tree
Hide file tree
Showing 3 changed files with 24 additions and 20 deletions.
@@ -53879,8 +53879,10 @@ <h4 id=the-history-interface><span class=secno>6.4.2 </span>The <code><a href=#h
<li>If the <a href=#origin>origin</a> of the resulting <a href=#absolute-url>absolute
URL</a> is not the same as the <a href=#origin>origin</a> of the
<a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, and either the <a href=#url-path title=url-path>&lt;path&gt;</a> or <a href=#url-query title=url-query>&lt;query&gt;</a> components of the two
<a href=#url title=URL>URLs</a> compared in the previous step
context">browsing context</a>'s <a href=#active-document>active document</a>,
and either the <a href=#url-path title=url-path>&lt;path&gt;</a> or
<a href=#url-query title=url-query>&lt;query&gt;</a> components of the
two <a href=#url title=URL>URLs</a> compared in the previous step
differ, raise a <code><a href=#security_err>SECURITY_ERR</a></code> exception and abort
these steps. (This prevents sandboxed content from spoofing other
pages on the same origin.)</li>
@@ -69006,8 +69008,8 @@ <h4 id=posting-messages><span class=secno>10.4.3 </span>Posting messages</h4>
<code><a href=#document>Document</a></code> of the <code><a href=#window>Window</a></code> object on which
the method was invoked does not have the <a href=#same-origin>same origin</a>
as the <a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, then abort these steps
silently.</p>
context">browsing context</a>'s <a href=#active-document>active document</a>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <a href=#absolute-url>absolute URL</a>, and the <code><a href=#document>Document</a></code> of the
@@ -69123,8 +69125,8 @@ <h4 id=posting-messages-with-message-ports><span class=secno>10.4.4 </span>Posti
<code><a href=#document>Document</a></code> of the <code><a href=#window>Window</a></code> object on which
the method was invoked does not have the <a href=#same-origin>same origin</a>
as the <a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, then abort these steps
silently.</p>
context">browsing context</a>'s <a href=#active-document>active document</a>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <a href=#absolute-url>absolute URL</a>, and the <code><a href=#document>Document</a></code> of the
14 index
@@ -53781,8 +53781,10 @@ x === this; // true</pre>
<li>If the <a href=#origin>origin</a> of the resulting <a href=#absolute-url>absolute
URL</a> is not the same as the <a href=#origin>origin</a> of the
<a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, and either the <a href=#url-path title=url-path>&lt;path&gt;</a> or <a href=#url-query title=url-query>&lt;query&gt;</a> components of the two
<a href=#url title=URL>URLs</a> compared in the previous step
context">browsing context</a>'s <a href=#active-document>active document</a>,
and either the <a href=#url-path title=url-path>&lt;path&gt;</a> or
<a href=#url-query title=url-query>&lt;query&gt;</a> components of the
two <a href=#url title=URL>URLs</a> compared in the previous step
differ, raise a <code><a href=#security_err>SECURITY_ERR</a></code> exception and abort
these steps. (This prevents sandboxed content from spoofing other
pages on the same origin.)</li>
@@ -64026,8 +64028,8 @@ function receiver(e) {
<code><a href=#document>Document</a></code> of the <code><a href=#window>Window</a></code> object on which
the method was invoked does not have the <a href=#same-origin>same origin</a>
as the <a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, then abort these steps
silently.</p>
context">browsing context</a>'s <a href=#active-document>active document</a>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <a href=#absolute-url>absolute URL</a>, and the <code><a href=#document>Document</a></code> of the
@@ -64143,8 +64145,8 @@ function receiver(e) {
<code><a href=#document>Document</a></code> of the <code><a href=#window>Window</a></code> object on which
the method was invoked does not have the <a href=#same-origin>same origin</a>
as the <a href=#entry-script>entry script</a>'s <a href="#script's-browsing-context" title="script's browsing
context">browsing context</a>, then abort these steps
silently.</p>
context">browsing context</a>'s <a href=#active-document>active document</a>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <a href=#absolute-url>absolute URL</a>, and the <code><a href=#document>Document</a></code> of the
16 source
@@ -60668,10 +60668,10 @@ x === this; // true</pre>
<li>If the <span>origin</span> of the resulting <span>absolute
URL</span> is not the same as the <span>origin</span> of the
<span>entry script</span>'s <span title="script's browsing
context">browsing context</span>, and either the <span
title="url-path">&lt;path&gt;</span> or <span
title="url-query">&lt;query&gt;</span> components of the two
<span title="URL">URLs</span> compared in the previous step
context">browsing context</span>'s <span>active document</span>,
and either the <span title="url-path">&lt;path&gt;</span> or
<span title="url-query">&lt;query&gt;</span> components of the
two <span title="URL">URLs</span> compared in the previous step
differ, raise a <code>SECURITY_ERR</code> exception and abort
these steps. (This prevents sandboxed content from spoofing other
pages on the same origin.)</li>
@@ -77586,8 +77586,8 @@ function receiver(e) {
<code>Document</code> of the <code>Window</code> object on which
the method was invoked does not have the <span>same origin</span>
as the <span>entry script</span>'s <span title="script's browsing
context">browsing context</span>, then abort these steps
silently.</p>
context">browsing context</span>'s <span>active document</span>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <span>absolute URL</span>, and the <code>Document</code> of the
@@ -77724,8 +77724,8 @@ function receiver(e) {
<code>Document</code> of the <code>Window</code> object on which
the method was invoked does not have the <span>same origin</span>
as the <span>entry script</span>'s <span title="script's browsing
context">browsing context</span>, then abort these steps
silently.</p>
context">browsing context</span>'s <span>active document</span>,
then abort these steps silently.</p>

<p>Otherwise, if the <var title="">targetOrigin</var> argument is
an <span>absolute URL</span>, and the <code>Document</code> of the

0 comments on commit a1f5dd2

Please sign in to comment.