[Bug 20567] Change [[Prototype]] for concept-node-adopt?

https://www.w3.org/Bugs/Public/show_bug.cgi?id=20567

Travis Leithead [MSFT] <travil@microsoft.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |travil@microsoft.com

--- Comment #1 from Travis Leithead [MSFT] <travil@microsoft.com> ---
IE9 added prototype re-parenting in order to ensure that document trees always
had consistent prototype relationships. It's good for instanceof, and it's good
for security defense-in-depth (so that some random node in a document doesn't
provide an attack vector to some other frame's document after that document
should no longer be available.).

A natural place for this is in:
"To adopt a node, with an ownerDocument, run these steps:"

But consideration also needs to be handled elsewhere for the document.open
cases.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Monday, 21 January 2013 19:29:33 UTC