| Index: Source/WebCore/page/SecurityOrigin.cpp
|
| ===================================================================
|
| --- Source/WebCore/page/SecurityOrigin.cpp (revision 101039)
|
| +++ Source/WebCore/page/SecurityOrigin.cpp (working copy)
|
| @@ -305,13 +305,6 @@
|
| if (this == dragInitiator)
|
| return true;
|
|
|
| - // FIXME: Currently we treat data URLs as having a unique origin, contrary to the
|
| - // current (9/19/2009) draft of the HTML5 specification. We still want to allow
|
| - // drop across data URLs, so we special case data URLs below. If we change to
|
| - // match HTML5 w.r.t. data URL security, then we can remove this check.
|
| - if (m_protocol == "data")
|
| - return true;
|
| -
|
| return canAccess(dragInitiator);
|
| }
|
|
|
|
|