Sat, 03 Jan 2015 20:18:00 +0100
Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <meta charset="UTF-8">
5 <script>
7 function boom()
8 {
9 // This shouldn't leak
10 var frame = document.getElementById("f");
11 var frameWin = frame.contentWindow;
12 document.body.removeChild(frame);
13 frameWin.navigator;
14 }
16 </script>
17 </head>
19 <body onload="boom();">
20 <iframe id="f" src="data:text/html;charset=utf-8,1"></iframe>
21 </body>
22 </html>