haikuwebkit/LayoutTests/plugins/get-url-with-javascript-des...

4 lines
132 B
Plaintext
Raw Permalink Normal View History

2011-02-20 Anders Carlsson <andersca@apple.com> Reviewed by Maciej Stachowiak. Crash when a plug-in requests a javascript: url that destroys the plug-in https://bugs.webkit.org/show_bug.cgi?id=54837 <rdar://problem/9005475> Add new plug-in test. * DumpRenderTree/DumpRenderTree.gypi: * DumpRenderTree/DumpRenderTree.xcodeproj/project.pbxproj: * DumpRenderTree/TestNetscapePlugIn/PluginTest.cpp: (PluginTest::NPN_GetURL): * DumpRenderTree/TestNetscapePlugIn/PluginTest.h: * DumpRenderTree/TestNetscapePlugIn/Tests/GetURLWithJavaScriptURLDestroyingPlugin.cpp: Added. (GetURLWithJavaScriptURLDestroyingPlugin::GetURLWithJavaScriptURLDestroyingPlugin): (GetURLWithJavaScriptURLDestroyingPlugin::NPP_New): * DumpRenderTree/TestNetscapePlugIn/win/TestNetscapePlugin.vcproj: * DumpRenderTree/qt/TestNetscapePlugin/TestNetscapePlugin.pro: 2011-02-20 Anders Carlsson <andersca@apple.com> Reviewed by Maciej Stachowiak. Crash when a plug-in requests a javascript: url that destroys the plug-in https://bugs.webkit.org/show_bug.cgi?id=54837 <rdar://problem/9005475> Add test. * plugins/get-url-with-javascript-destroying-plugin-expected.txt: Added. * plugins/get-url-with-javascript-destroying-plugin.html: Added. 2011-02-20 Anders Carlsson <andersca@apple.com> Reviewed by Maciej Stachowiak. Crash when a plug-in requests a javascript: url that destroys the plug-in https://bugs.webkit.org/show_bug.cgi?id=54837 <rdar://problem/9005475> * WebProcess/Plugins/PluginProxy.cpp: (WebKit::PluginProxy::destroy): Null out m_pluginController. * WebProcess/Plugins/PluginView.cpp: (WebKit::PluginView::performJavaScriptURLRequest): Don't access the frame through m_pluginElement since it will be nulled out when the plug-in is destroyed. Canonical link: https://commits.webkit.org/69090@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@79157 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-02-21 00:09:23 +00:00
This tests that evaluating JS that calls NPN_GetURL to evaluate a javascript: URL that destroys the plug-in doesn't crash.
SUCCESS