[Bug 11323] New: Don't run scripts when the owner doc isn't the inserter parser's doc or when the owner doc is not the same at "run" and "execute" time

http://www.w3.org/Bugs/Public/show_bug.cgi?id=11323

           Summary: Don't run scripts when the owner doc isn't the
                    inserter parser's doc or when the owner doc is not the
                    same at "run" and "execute" time
           Product: HTML WG
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: HTML5 spec (editor: Ian Hickson)
        AssignedTo: ian@hixie.ch
        ReportedBy: hsivonen@iki.fi
         QAContact: public-html-bugzilla@w3.org
                CC: mike@w3.org, public-html-wg-issue-tracking@w3.org,
                    public-html@w3.org


Context: https://bugzilla.mozilla.org/show_bug.cgi?id=592366

As a defense in depth measure, please make scripts not executable (with their
"already started" flag set!) if 
 1) For a parser-inserted script at the time of the "run" algorithm the owner
document of the script is not the document whose active parser is triggering
the "run" algorithm.
 2) If the owner doc of the script at the time of "execution" is not the same
as at the time of the "run" algorithm was invoked.

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

Received on Tuesday, 16 November 2010 09:55:58 UTC