| /* |
| * Copyright (C) 2007, 2008 Apple Inc. All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of |
| * its contributors may be used to endorse or promote products derived |
| * from this software without specific prior written permission. |
| * |
| * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY |
| * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED |
| * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
| * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY |
| * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES |
| * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
| * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
| * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #include "config.h" |
| #include "JSHTMLFrameElement.h" |
| |
| #include "CSSHelper.h" |
| #include "Document.h" |
| #include "HTMLFrameElement.h" |
| #include "JSDOMBinding.h" |
| |
| using namespace JSC; |
| |
| namespace WebCore { |
| |
| static inline bool allowSettingJavascriptURL(ExecState* exec, HTMLFrameElement* imp, const String& value) |
| { |
| if (protocolIs(parseURL(value), "javascript")) { |
| if (!checkNodeSecurity(exec, imp->contentDocument())) |
| return false; |
| } |
| return true; |
| } |
| |
| void JSHTMLFrameElement::setSrc(ExecState* exec, JSValue* value) |
| { |
| HTMLFrameElement* imp = static_cast<HTMLFrameElement*>(impl()); |
| String srcValue = valueToStringWithNullCheck(exec, value); |
| |
| if (!allowSettingJavascriptURL(exec, imp, srcValue)) |
| return; |
| |
| imp->setSrc(srcValue); |
| return; |
| } |
| |
| void JSHTMLFrameElement::setLocation(ExecState* exec, JSValue* value) |
| { |
| HTMLFrameElement* imp = static_cast<HTMLFrameElement*>(impl()); |
| String locationValue = valueToStringWithNullCheck(exec, value); |
| |
| if (!allowSettingJavascriptURL(exec, imp, locationValue)) |
| return; |
| |
| imp->setLocation(locationValue); |
| return; |
| } |
| |
| } // namespace WebCore |