Bug 128889 (CVE-2014-1309) - Ensure that removing an iframe from the DOM tree disconnects its Frame.
Summary: Ensure that removing an iframe from the DOM tree disconnects its Frame.
Status: RESOLVED FIXED
Alias: CVE-2014-1309
Product: WebKit
Classification: Unclassified
Component: Frames (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Andreas Kling
URL:
Keywords: InRadar
: 120497 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-02-16 16:22 PST by Andreas Kling
Modified: 2016-07-19 13:08 PDT (History)
6 users (show)

See Also:

Attachments
Patch (4.06 KB, patch)
2014-02-16 16:25 PST, Andreas Kling 		commit-queue: commit-queue-
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Andreas Kling 2014-02-16 16:23:06 PST 
<rdar://problem/15671221>
Comment 2 Andreas Kling 2014-02-16 16:25:08 PST 
Created attachment 224325 [details]
Patch
Comment 3 WebKit Commit Bot 2014-02-16 17:30:37 PST 
Comment on attachment 224325 [details]
Patch

Rejecting attachment 224325 [details] from commit-queue.

Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.appspot.com', '--bot-id=webkit-cq-03', 'validate-changelog', '--check-oops', '--non-interactive', 224325, '--port=mac']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit

/Volumes/Data/EWS/WebKit/LayoutTests/ChangeLog neither lists a valid reviewer nor contains the string "Unreviewed" or "Rubber stamp" (case insensitive).

Full output: http://webkit-queues.appspot.com/results/5326877682040832
Comment 4 Andreas Kling 2014-02-16 19:46:50 PST 
Committed r164204: <http://trac.webkit.org/changeset/164204>
Comment 5 Brent Fulgham 2016-07-19 13:08:40 PDT 
*** Bug 120497 has been marked as a duplicate of this bug. ***