Source/WebCore/ChangeLog

Index: Source/WebCore/ChangeLog
===================================================================
--- Source/WebCore/ChangeLog	(revision 114571)
+++ Source/WebCore/ChangeLog	(working copy)
@@ -1,3 +1,77 @@
+2012-04-04  Andrei Burago  <aburago@chromium.org>
+
+        Auto-size may not work on first load
+        https://bugs.webkit.org/show_bug.cgi?id=82989
+
+        Reviewed by David Levin.
+
+        No new tests. The only known repro scenario involves using chrome with a third-party extension,
+        which makes making a test out of it problematic.
+
+        * dom/Document.cpp:
+        (WebCore::Document::implicitClose):
+        * page/FrameView.cpp:
+        (WebCore::FrameView::autoSizeIfEnabled):
+
+2012-04-04  Adam Barth  <abarth@webkit.org>
+
+        XSSAuditor doesn't catch injected srcdoc attributes
+        https://bugs.webkit.org/show_bug.cgi?id=83238
+
+        Reviewed by Daniel Bates.
+
+        <iframe srcdoc> is an XSS injection vector because the srcdoc inherits
+        the security origin of the parent page.  This patch updates the XSS
+        auditor to check whether the attribute is injected using the same
+        hueristics we use for inline event handlers.
+
+        Test: http/tests/security/xssAuditor/iframe-srcdoc.html
+
+        * html/parser/XSSAuditor.cpp:
+        (WebCore::XSSAuditor::filterIframeToken):
+        (WebCore::XSSAuditor::eraseDangerousAttributesIfInjected):
+        (WebCore::XSSAuditor::eraseAttributeIfInjected):
+        (WebCore::XSSAuditor::decodedSnippetForAttribute):
+        * html/parser/XSSAuditor.h:
+
+2012-04-04  Leo Yang  <leo.yang@torchmobile.com.cn>
+
+        [BlackBerry] Add local: protocol support in KURL for blackberry
+        https://bugs.webkit.org/show_bug.cgi?id=82695
+
+        Reviewed by Rob Buis.
+
+        BlackBerry porting is using local: protocol just as file: protocol
+        with the exception that it sandboxes the path to the application private space.
+
+        * platform/KURL.cpp:
+        (WebCore::KURL::parse):
+        (WebCore::portAllowed):
+
+2012-04-04  Simon Fraser  <simon.fraser@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=82994
+
+        Reviewed by James Robinson.
+        
+        Fix an issue when removing elements with reflections from the document.
+
+        Test: compositing/reflections/remove-reflection.html
+
+        * platform/graphics/GraphicsLayer.cpp:
+        (WebCore::GraphicsLayer::willBeDestroyed):
+
+2012-04-04  Charles Wei  <charles.wei@torchmobile.com.cn>
+
+        Need using namespace std for system calls in MIMESniffing.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=82706
+
+        Reviewed by Antonio Gomes.
+
+        No new tests, just fix the compile error for BlackBerry porting.
+
+        * platform/network/MIMESniffing.cpp:
+
 2012-04-04  Greg Billock  <gbillock@google.com>
 
         Switch web intents API to be vendor-prefixed