Thomas Much's Weblog

iCab 3.0.3 Beta 460

Yesterday another iCab beta version was released in which Alexander fixed a JavaScript security issue:

• Fixed a security problem: For JavaScript event handlers the "Same-Origin-Policy" did not always work correctly, so "foreign" web pages could be able to intercept event handlers from other web pages.
• In certain very rare circumstances it could happen that iCab could no longer load any images until it was restarted. This happend if images display ways disabled and a web page defined an "onerror" handler (JavaScript) for an ordinary <img> tag which would just assign another image URL to the tag when the loading of the image failed.