Gregory Terzian 1af34ca483 script: prevent panic when opening an auxiliary using a window with a closed browsing context(iframe) (#39922) ...

When one unbinds an iframe from the tree, its browsing context is
destroyed, however if script keeps a reference to the window, it can
still try to open an auxiliary, resulting in a crash because the
constellation has already removed the browsing context. This adds a
non-intermittent test for the problem, and addresses it in a seemingly
ad-hoc way by checking whether the browsing context has already been
discarded, and if so doing an early return, as part of the window open
steps.

Testing: Added a crash test in the mozilla wpt folder.
Fixes: https://github.com/servo/servo/issues/39716

---------

Signed-off-by: gterzian <2792687+gterzian@users.noreply.github.com>

2025-10-17 12:05:08 +00:00

..

docs

doc: fix broken link to UnrootedMustRoot plugin (#36198)

2025-03-28 10:23:41 +00:00

dom

script: prevent panic when opening an auxiliary using a window with a closed browsing context(iframe) (#39922)

2025-10-17 12:05:08 +00:00

layout_dom

layout: Ensure IFC for abspos with inline-level original display (#39041)

2025-09-02 03:43:55 +00:00

resources

tidy: Add a rule ensuring that // comments are followed by a space in Rust (#38698)

2025-08-18 12:09:09 +00:00

animation_timeline.rs

script: Limit public exports. (#34915)

2025-01-10 08:19:19 +00:00

animations.rs

Upgrade Stylo to 2025-10-01 (#39612)

2025-10-02 01:23:05 +00:00

body.rs

Implement fetchLater (#39547)

2025-10-02 07:51:19 +00:00

build.rs

script: copy include! files from script_bindings to script's OUT_DIR (#36384)

2025-04-08 19:22:24 +00:00

Cargo.toml

Upgrade Stylo to 2025-10-01 (#39612)

2025-10-02 01:23:05 +00:00

clipboard_provider.rs

Add direct script to embedder channel (#39039)

2025-09-02 06:33:44 +00:00

conversions.rs

suppress build warnings when disabling webgpu and webxr (#35379)

2025-02-08 08:16:21 +00:00

devtools.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

document_collection.rs

Replace Hash Algorithm in HashMap/Set with FxHashMap/Set for simple types (#39166)

2025-09-09 08:33:46 +00:00

document_loader.rs

net: Remove CoreResourceThread from FetchThread state (#38422)

2025-08-13 17:40:10 +00:00

drag_data_store.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

fetch.rs

Add policy container to all requests (#39775)

2025-10-12 12:13:19 +00:00

iframe_collection.rs

Removed FnvHash and transformed the rest to FxHashmap (#39233)

2025-09-10 13:34:54 +00:00

image_animation.rs

script: Do not root nodes with animating images (#38996)

2025-10-09 07:28:38 +00:00

indexed_db.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

init.rs

Make generated bindings generic over DOM types (#35169)

2025-01-25 05:08:49 +00:00

layout_image.rs

Return correct source position for element CSP violations (#37970)

2025-07-11 08:42:51 +00:00

lib.rs

Move XPath implementation into its own crate (#39546)

2025-09-30 19:55:10 +00:00

links.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

messaging.rs

libservo: Notify the embedder when an input event can't be sent to a Pipeline (#39810)

2025-10-12 09:26:38 +00:00

microtask.rs

Combine some access to the thread local variable for script thread. (#38752)

2025-09-11 09:40:32 +00:00

mime.rs

chore: remove repetitive word in comment (#39948)

2025-10-17 08:48:23 +00:00

navigation.rs

constellation: Pass system theme to new Pipelines (#37132)

2025-05-26 12:05:38 +00:00

network_listener.rs

Propagate CanGc arguments through callers in constructors (#35541)

2025-02-20 16:17:45 +00:00

realms.rs

Move generated bindings to script_bindings (#36323)

2025-04-04 06:45:08 +00:00

routed_promise.rs

script: add TaskSource argument to route_promise (#36831)

2025-05-04 17:05:27 +00:00

script_module.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

script_mutation_observers.rs

script: Empty pending mutation observers when notifying mutation observers (#39456)

2025-09-29 14:15:07 +00:00

script_runtime.rs

script: Fix script string transfered to mozjs with wrong encoding (#39799)

2025-10-15 07:42:11 +00:00

script_thread.rs

constellation: add source browsing context info in forwarded post message (#39833)

2025-10-17 11:20:53 +00:00

script_window_proxies.rs

Split WindowProxies in script to own struct and allow to get an Rc to it. (#39274)

2025-09-29 09:46:49 +00:00

security_manager.rs

Inherit CSP for blob workers (#38033)

2025-07-17 08:14:20 +00:00

serviceworker_manager.rs

script: replace load_whole_resource with async fetch when constructing a worker (#39671)

2025-10-13 21:11:45 +00:00

stylesheet_loader.rs

Stylo: Let Stylesheet::from_bytes() take a Arc<Locked<MediaList>> parameter (#39731)

2025-10-09 21:21:16 +00:00

stylesheet_set.rs

script: Limit public exports. (#34915)

2025-01-10 08:19:19 +00:00

task_manager.rs

Implement fetchLater (#39547)

2025-10-02 07:51:19 +00:00

task_queue.rs

Replace Hash Algorithm in HashMap/Set with FxHashMap/Set for simple types (#39166)

2025-09-09 08:33:46 +00:00

task_source.rs

Implement fetchLater (#39547)

2025-10-02 07:51:19 +00:00

task.rs

script: Measure heap usage of various ignored fields (#38791)

2025-08-20 08:43:58 +00:00

test.rs

script: Move HTML DOM interfaces to script/dom/html/ (#39046)

2025-08-31 01:00:09 +00:00

textinput.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

timers.rs

script: Ensure scheduled timers account for suspension offset. (#39880)

2025-10-15 13:14:16 +00:00

unminify.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

webdriver_handlers.rs

script: Make remaining JavaScript evaluation result serialization functions safe (#39924)

2025-10-16 18:55:23 +00:00

window_named_properties.rs

script: Move operations in window_named_properties::get_own_property_descriptor & webdriver_handlers::clone_an_object into unsafe blocks (#38951)

2025-08-26 21:48:25 +00:00

xpath.rs

xpath: Let the parents of attribute nodes be their owner elements (#39749)

2025-10-10 04:06:44 +00:00