yvt c25355704d fix(script): the condition for exposing a cross-origin setter is CrossOriginWritable, not CrossOriginReadable ...

The expression `crossOriginIframe.contentWindow.location.href = "new
href"` takes the following steps: (1) Get the setter for `href` by
invoking `[[GetOwnProperty]]` on `crossOriginIframe.contentWindow.
location`. (2) Call the setter, passing `crossOriginIframe.
contentWindow` and `"new href"`. Since the target `Location` is cross
origin, getting the setter succeeds only if the `CrossOriginWritable`
extended attribute is present on the `href` attribute, and it's present.
However, instead of `CrossOriginWritable`, `CrossOriginReadable` was
checked mistakenly.

Since `Location#href` has `CrossOriginWritable` but not
`CrossOriginReadable`, this bug rendered `Location#href` inaccessible
from a cross-origin document.

2021-08-17 09:26:27 +09:00

..

parser

Port some code to Python3

2021-02-18 09:35:46 -05:00

ply

Port some code to Python3

2021-02-18 09:35:46 -05:00

api.html.template

Generate a list of supported DOM APIs from parsed WebIDLs.

2016-07-15 18:13:09 -04:00

apis.html.template

Generate a list of supported DOM APIs from parsed WebIDLs.

2016-07-15 18:13:09 -04:00

Bindings.conf

Auto merge of #27026 - CYBAI:dynamic-module, r=jdm

2020-07-19 09:29:50 -04:00

CodegenRust.py

fix(script): the condition for exposing a cross-origin setter is CrossOriginWritable, not CrossOriginReadable

2021-08-17 09:26:27 +09:00

Configuration.py

feat(script): implement some of the non-ordinary internal methods of Location

2021-07-16 01:26:05 +09:00

interface.html.template

Generate a list of supported DOM APIs from parsed WebIDLs.

2016-07-15 18:13:09 -04:00

property.html.template

Generate a list of supported DOM APIs from parsed WebIDLs.

2016-07-15 18:13:09 -04:00

run.py

Port some code to Python3

2021-02-18 09:35:46 -05:00