{"shas":[["6d80e246a685a9cfb9ad647428e65a9fe3b99106","af664bbd4d5aee5df9352ca181b40e17255c4a06@apple.com","2011-02-20  Anders Carlsson  <andersca@apple.com>\n\n        Reviewed by Maciej Stachowiak.\n\n        Crash when a plug-in requests a javascript: url that destroys the plug-in\n        https://bugs.webkit.org/show_bug.cgi?id=54837\n        <rdar://problem/9005475>\n\n        Add new plug-in test.\n\n        * DumpRenderTree/DumpRenderTree.gypi:\n        * DumpRenderTree/DumpRenderTree.xcodeproj/project.pbxproj:\n        * DumpRenderTree/TestNetscapePlugIn/PluginTest.cpp:\n        (PluginTest::NPN_GetURL):\n        * DumpRenderTree/TestNetscapePlugIn/PluginTest.h:\n        * DumpRenderTree/TestNetscapePlugIn/Tests/GetURLWithJavaScriptURLDestroyingPlugin.cpp: Added.\n        (GetURLWithJavaScriptURLDestroyingPlugin::GetURLWithJavaScriptURLDestroyingPlugin):\n        (GetURLWithJavaScriptURLDestroyingPlugin::NPP_New):\n        * DumpRenderTree/TestNetscapePlugIn/win/TestNetscapePlugin.vcproj:\n        * DumpRenderTree/qt/TestNetscapePlugin/TestNetscapePlugin.pro:\n2011-02-20  Anders Carlsson  <andersca@apple.com>\n\n        Reviewed by Maciej Stachowiak.\n\n        Crash when a plug-in requests a javascript: url that destroys the plug-in\n        https://bugs.webkit.org/show_bug.cgi?id=54837\n        <rdar://problem/9005475>\n\n        Add test.\n\n        * plugins/get-url-with-javascript-destroying-plugin-expected.txt: Added.\n        * plugins/get-url-with-javascript-destroying-plugin.html: Added.\n2011-02-20  Anders Carlsson  <andersca@apple.com>\n\n        Reviewed by Maciej Stachowiak.\n\n        Crash when a plug-in requests a javascript: url that destroys the plug-in\n        https://bugs.webkit.org/show_bug.cgi?id=54837\n        <rdar://problem/9005475>\n\n        * WebProcess/Plugins/PluginProxy.cpp:\n        (WebKit::PluginProxy::destroy):\n        Null out m_pluginController.\n\n        * WebProcess/Plugins/PluginView.cpp:\n        (WebKit::PluginView::performJavaScriptURLRequest):\n        Don't access the frame through m_pluginElement since it will be nulled out\n        when the plug-in is destroyed.\n\n\ngit-svn-id: http://svn.webkit.org/repository/webkit/trunk@79157 268f45cc-cd09-0410-ab3c-d52691b4dbfc","andersca@apple.com"],["a788d7bfcfd808aa607bbeb96c220d64f697919c","a82ad16292c9f3b890b7b13c336ff95f6bd02623@webkit.org","2011-02-20  Sheriff Bot  <webkit.review.bot@gmail.com>\n\n        Unreviewed, rolling out r79104.\n        http://trac.webkit.org/changeset/79104\n        https://bugs.webkit.org/show_bug.cgi?id=54835\n\n        Might have caused flaky canaries (Requested by tonyg-cr on\n        #webkit).\n\n        * html/parser/HTMLDocumentParser.cpp:\n        (WebCore::HTMLDocumentParser::canTakeNextToken):\n        (WebCore::HTMLDocumentParser::pumpTokenizer):\n        * html/parser/HTMLParserScheduler.cpp:\n        (WebCore::isLayoutTimerActive):\n        * html/parser/HTMLParserScheduler.h:\n        (WebCore::HTMLParserScheduler::checkForYieldBeforeToken):\n        * page/FrameView.h:\n\ngit-svn-id: http://svn.webkit.org/repository/webkit/trunk@79158 268f45cc-cd09-0410-ab3c-d52691b4dbfc","commit-queue@webkit.org"]],"repo":"appcelerator/webkit_titanium","actor":"joshthecoder","ref":"refs/heads/master","size":2,"head":"a788d7bfcfd808aa607bbeb96c220d64f697919c","actor_gravatar":"1ac0f2a98e4ab76825933758f4ce98f7","push_id":25183081}