On Thu, Aug 12, 2010 at 6:53 AM, Mads Sig Ager <[email protected]> wrote:
> I will look into this.  There are a couple of places in V8 where the
> ReportFailedAccessCheck method is called where the code cannot currently
> handle a GC. I'll see if I can make it safe for the callback to allocate.

Great, thanks!

> Is the intension that all cross-frame accesses are supposed to generate DOM
> security exceptions?

As best as I can tell from my reading of the HTML 5 spec, yes:

http://www.whatwg.org/specs/web-apps/current-work/multipage/dom.html#security-document
http://www.whatwg.org/specs/web-apps/current-work/multipage/browsers.html#security-window
http://www.whatwg.org/specs/web-apps/current-work/multipage/history.html#security-location

Mihai

-- 
v8-users mailing list
[email protected]
http://groups.google.com/group/v8-users

Reply via email to