Don't set document.domain to an IP address fragment.

Source/weborigin/OriginAccessEntry.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 17 matching lines @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "config.h"
 #include "weborigin/OriginAccessEntry.h"
 
 #include "weborigin/SecurityOrigin.h"
 
 namespace WebCore {
 
-OriginAccessEntry::OriginAccessEntry(const String& protocol, const String& host, SubdomainSetting subdomainSetting)
+OriginAccessEntry::OriginAccessEntry(const String& protocol, const String& host, SubdomainSetting subdomainSetting, IPAddressSetting ipAddressSetting)
     : m_protocol(protocol.lower())
     , m_host(host.lower())
     , m_subdomainSettings(subdomainSetting)
+    , m_ipAddressSettings(ipAddressSetting)
 {
     ASSERT(subdomainSetting == AllowSubdomains || subdomainSetting == DisallowSubdomains);
 
     // Assume that any host that ends with a digit is trying to be an IP address.
     m_hostIsIPAddress = !m_host.isEmpty() && isASCIIDigit(m_host[m_host.length() - 1]);
 }
 
 bool OriginAccessEntry::matchesOrigin(const SecurityOrigin& origin) const
 {
     ASSERT(origin.host() == origin.host().lower());
     ASSERT(origin.protocol() == origin.protocol().lower());
 
     if (m_protocol != origin.protocol())
         return false;
 
     // Special case: Include subdomains and empty host means "all hosts, including ip addresses".
     if (m_subdomainSettings == AllowSubdomains && m_host.isEmpty())
         return true;
 
     // Exact match.
     if (m_host == origin.host())
         return true;
 
     // Otherwise we can only match if we're matching subdomains.
     if (m_subdomainSettings == DisallowSubdomains)
         return false;
 
     // Don't try to do subdomain matching on IP addresses.
-    if (m_hostIsIPAddress)
+    if (m_hostIsIPAddress && m_ipAddressSettings == TreatIPAddressAsIPAddress)
         return false;
 
     // Match subdomains.
     if (origin.host().length() > m_host.length() && origin.host()[origin.host().length() - m_host.length() - 1] == '.' && origin.host().endsWith(m_host))
         return true;
 
     return false;
 }
 
 } // namespace WebCore