Attachment 371297 Details for Bug 198534 – Patch

[patch] Patch

bug-198534-20190604100947.patch (text/plain), 4.55 KB, created by Chris Dumez on 2019-06-04 10:09:48 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: Chris Dumez

Created: 2019-06-04 10:09:48 PDT

Size: 4.55 KB

patch

obsolete

>Subversion Revision: 246053
>diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
>index a01f2a73b2dbc1904ed79cc664b522cbe66b52ef..dd919f941b3ebfc2f69a54de0d330f6ecb45cb82 100644
>--- a/Source/WebCore/ChangeLog
>+++ b/Source/WebCore/ChangeLog
>@@ -1,3 +1,19 @@
>+2019-06-04  Chris Dumez  <cdumez@apple.com>
>+
>+        Crash when calling XMLHttpRequest.setRequestHeader() in a worker
>+        https://bugs.webkit.org/show_bug.cgi?id=198534
>+        <rdar://problem/51393912>
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Make sure the script exxecution context is a Document because calling document()
>+        to get the settings.
>+
>+        Test: fast/workers/worker-xhr-setRequestHeader.html
>+
>+        * xml/XMLHttpRequest.cpp:
>+        (WebCore::XMLHttpRequest::setRequestHeader):
>+
> 2019-06-03  Robin Morisset  <rmorisset@apple.com>
> 
>         [WHLSL] Parsing and lexing the standard library is slow
>diff --git a/Source/WebCore/xml/XMLHttpRequest.cpp b/Source/WebCore/xml/XMLHttpRequest.cpp
>index 2f717c3a1fb31272d08b51d1eee80d8335aa317a..341c06e58854966cbdbc1e9df820eafd90ba518a 100644
>--- a/Source/WebCore/xml/XMLHttpRequest.cpp
>+++ b/Source/WebCore/xml/XMLHttpRequest.cpp
>@@ -817,7 +817,7 @@ ExceptionOr<void> XMLHttpRequest::setRequestHeader(const String& name, const Str
> #if ENABLE(DASHBOARD_SUPPORT)
>     allowUnsafeHeaderField = usesDashboardBackwardCompatibilityMode();
> #endif
>-    if (securityOrigin()->canLoadLocalResources() && document()->settings().allowSettingAnyXHRHeaderFromFileURLs())
>+    if (securityOrigin()->canLoadLocalResources() && scriptExecutionContext()->isDocument() && document()->settings().allowSettingAnyXHRHeaderFromFileURLs())
>         allowUnsafeHeaderField = true;
>     if (!allowUnsafeHeaderField && isForbiddenHeaderName(name)) {
>         logConsoleError(scriptExecutionContext(), "Refused to set unsafe header \"" + name + "\"");
>diff --git a/LayoutTests/ChangeLog b/LayoutTests/ChangeLog
>index b3b473946565159a045a969e4bb4cca7a1022ec7..43d1f0c5947789819a09388a152fed9b7ca9af11 100644
>--- a/LayoutTests/ChangeLog
>+++ b/LayoutTests/ChangeLog
>@@ -1,3 +1,17 @@
>+2019-06-04  Chris Dumez  <cdumez@apple.com>
>+
>+        Crash when calling XMLHttpRequest.setRequestHeader() in a worker
>+        https://bugs.webkit.org/show_bug.cgi?id=198534
>+        <rdar://problem/51393912>
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        Add layout test coverage.
>+
>+        * fast/workers/resources/worker-xhr-setRequestHeader.js: Added.
>+        * fast/workers/worker-xhr-setRequestHeader-expected.txt: Added.
>+        * fast/workers/worker-xhr-setRequestHeader.html: Added.
>+
> 2019-06-03  Youenn Fablet  <youenn@apple.com>
> 
>         Allow resizing of camera video feeds to very small resolutions
>diff --git a/LayoutTests/fast/workers/resources/worker-xhr-setRequestHeader.js b/LayoutTests/fast/workers/resources/worker-xhr-setRequestHeader.js
>new file mode 100644
>index 0000000000000000000000000000000000000000..64cd8bb504504245619e0e0237d57280ea77171e
>--- /dev/null
>+++ b/LayoutTests/fast/workers/resources/worker-xhr-setRequestHeader.js
>@@ -0,0 +1,14 @@
>+importScripts('../../../resources/js-test-pre.js');
>+
>+var global = this;
>+global.jsTestIsAsync = true;
>+
>+description("Tests XMLHttpRequest.setRequestHeader() in workers");
>+
>+var xhr = new XMLHttpRequest;
>+xhr.open("GET", "empty-worker.js", false);
>+xhr.setRequestHeader("Accept", "*/*");
>+xhr.send(null);
>+
>+finishJSTest();
>+
>diff --git a/LayoutTests/fast/workers/worker-xhr-setRequestHeader-expected.txt b/LayoutTests/fast/workers/worker-xhr-setRequestHeader-expected.txt
>new file mode 100644
>index 0000000000000000000000000000000000000000..25f9ec5260dd1eff6a8910879d0e67fc022c2b9a
>--- /dev/null
>+++ b/LayoutTests/fast/workers/worker-xhr-setRequestHeader-expected.txt
>@@ -0,0 +1,10 @@
>+[Worker] Tests XMLHttpRequest.setRequestHeader() in workers
>+
>+On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
>+
>+
>+Starting worker: resources/worker-xhr-setRequestHeader.js
>+PASS successfullyParsed is true
>+
>+TEST COMPLETE
>+
>diff --git a/LayoutTests/fast/workers/worker-xhr-setRequestHeader.html b/LayoutTests/fast/workers/worker-xhr-setRequestHeader.html
>new file mode 100644
>index 0000000000000000000000000000000000000000..f6fa138959001a36dc78ecb86fef5dbed282181b
>--- /dev/null
>+++ b/LayoutTests/fast/workers/worker-xhr-setRequestHeader.html
>@@ -0,0 +1,12 @@
>+<!DOCTYPE html>
>+<html>
>+<head>
>+<script src="../../resources/js-test-pre.js"></script>
>+</head>
>+<body>
>+<script>
>+worker = startWorker('resources/worker-xhr-setRequestHeader.js');
>+</script>
>+<script src="../../resources/js-test-post.js"></script>
>+</body>
>+</html>

Actions: View | Formatted Diff | Diff

Attachments on bug 198534: 371297 | 371304 | 371316 | 371317 | 371321 | 371324 | 371327 | 371343 | 371344 | 371346