dlls/mshtml/script.c

   1 /*
   2  * Copyright 2008 Jacek Caban for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20 #include <assert.h>
  21
  22 #define COBJMACROS
  23
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "winuser.h"
  27 #include "ole2.h"
  28 #include "activscp.h"
  29 #include "activdbg.h"
  30 #include "shlwapi.h"
  31
  32 #include "wine/debug.h"
  33
  34 #include "mshtml_private.h"
  35 #include "htmlscript.h"
  36 #include "pluginhost.h"
  37 #include "htmlevent.h"
  38 #include "binding.h"
  39
  40 WINE_DEFAULT_DEBUG_CHANNEL(mshtml);
  41
  42 #ifdef _WIN64
  43
  44 #define CTXARG_T DWORDLONG
  45 #define IActiveScriptSiteDebugVtbl IActiveScriptSiteDebug64Vtbl
  46
  47 #define IActiveScriptParse_Release IActiveScriptParse64_Release
  48 #define IActiveScriptParse_InitNew IActiveScriptParse64_InitNew
  49 #define IActiveScriptParse_ParseScriptText IActiveScriptParse64_ParseScriptText
  50 #define IActiveScriptParseProcedure2_Release IActiveScriptParseProcedure2_64_Release
  51 #define IActiveScriptParseProcedure2_ParseProcedureText IActiveScriptParseProcedure2_64_ParseProcedureText
  52
  53 #else
  54
  55 #define CTXARG_T DWORD
  56 #define IActiveScriptSiteDebugVtbl IActiveScriptSiteDebug32Vtbl
  57
  58 #define IActiveScriptParse_Release IActiveScriptParse32_Release
  59 #define IActiveScriptParse_InitNew IActiveScriptParse32_InitNew
  60 #define IActiveScriptParse_ParseScriptText IActiveScriptParse32_ParseScriptText
  61 #define IActiveScriptParseProcedure2_Release IActiveScriptParseProcedure2_32_Release
  62 #define IActiveScriptParseProcedure2_ParseProcedureText IActiveScriptParseProcedure2_32_ParseProcedureText
  63
  64 #endif
  65
  66 /* See jscript.h in jscript.dll. */
  67 #define SCRIPTLANGUAGEVERSION_HTML 0x400
  68 #define SCRIPTLANGUAGEVERSION_ES5  0x102
  69 #define SCRIPTLANGUAGEVERSION_ES6  0x103
  70
  71 struct ScriptHost {
  72     IActiveScriptSite              IActiveScriptSite_iface;
  73     IActiveScriptSiteInterruptPoll IActiveScriptSiteInterruptPoll_iface;
  74     IActiveScriptSiteWindow        IActiveScriptSiteWindow_iface;
  75     IActiveScriptSiteUIControl     IActiveScriptSiteUIControl_iface;
  76     IActiveScriptSiteDebug         IActiveScriptSiteDebug_iface;
  77     IServiceProvider               IServiceProvider_iface;
  78
  79     LONG ref;
  80
  81     IActiveScript *script;
  82     IActiveScriptParse *parse;
  83     IActiveScriptParseProcedure2 *parse_proc;
  84
  85     SCRIPTSTATE script_state;
  86
  87     HTMLInnerWindow *window;
  88
  89     GUID guid;
  90     struct list entry;
  91 };
  92
  93 static ScriptHost *get_elem_script_host(HTMLInnerWindow*,HTMLScriptElement*);
  94
  95 static BOOL set_script_prop(ScriptHost *script_host, DWORD property, VARIANT *val)
  96 {
  97     IActiveScriptProperty *script_prop;
  98     HRESULT hres;
  99
 100     hres = IActiveScript_QueryInterface(script_host->script, &IID_IActiveScriptProperty,
 101             (void**)&script_prop);
 102     if(FAILED(hres)) {
 103         WARN("Could not get IActiveScriptProperty iface: %08x\n", hres);
 104         return FALSE;
 105     }
 106
 107     hres = IActiveScriptProperty_SetProperty(script_prop, property, NULL, val);
 108     IActiveScriptProperty_Release(script_prop);
 109     if(FAILED(hres)) {
 110         WARN("SetProperty(%x) failed: %08x\n", property, hres);
 111         return FALSE;
 112     }
 113
 114     return TRUE;
 115 }
 116
 117 static BOOL init_script_engine(ScriptHost *script_host)
 118 {
 119     compat_mode_t compat_mode;
 120     IObjectSafety *safety;
 121     SCRIPTSTATE state;
 122     DWORD supported_opts=0, enabled_opts=0, script_mode;
 123     VARIANT var;
 124     HRESULT hres;
 125
 126     hres = IActiveScript_QueryInterface(script_host->script, &IID_IActiveScriptParse, (void**)&script_host->parse);
 127     if(FAILED(hres)) {
 128         WARN("Could not get IActiveScriptParse: %08x\n", hres);
 129         return FALSE;
 130     }
 131
 132     hres = IActiveScript_QueryInterface(script_host->script, &IID_IObjectSafety, (void**)&safety);
 133     if(FAILED(hres)) {
 134         FIXME("Could not get IObjectSafety: %08x\n", hres);
 135         return FALSE;
 136     }
 137
 138     hres = IObjectSafety_GetInterfaceSafetyOptions(safety, &IID_IActiveScriptParse, &supported_opts, &enabled_opts);
 139     if(FAILED(hres)) {
 140         FIXME("GetInterfaceSafetyOptions failed: %08x\n", hres);
 141     }else if(!(supported_opts & INTERFACE_USES_DISPEX)) {
 142         FIXME("INTERFACE_USES_DISPEX is not supported\n");
 143     }else {
 144         hres = IObjectSafety_SetInterfaceSafetyOptions(safety, &IID_IActiveScriptParse,
 145                 INTERFACESAFE_FOR_UNTRUSTED_DATA|INTERFACE_USES_DISPEX|INTERFACE_USES_SECURITY_MANAGER,
 146                 INTERFACESAFE_FOR_UNTRUSTED_DATA|INTERFACE_USES_DISPEX|INTERFACE_USES_SECURITY_MANAGER);
 147         if(FAILED(hres))
 148             FIXME("SetInterfaceSafetyOptions failed: %08x\n", hres);
 149     }
 150
 151     IObjectSafety_Release(safety);
 152     if(FAILED(hres))
 153         return FALSE;
 154
 155     compat_mode = lock_document_mode(script_host->window->doc);
 156     script_mode = compat_mode < COMPAT_MODE_IE8 ? SCRIPTLANGUAGEVERSION_5_7 : SCRIPTLANGUAGEVERSION_5_8;
 157     if(IsEqualGUID(&script_host->guid, &CLSID_JScript)) {
 158         if(compat_mode >= COMPAT_MODE_IE11)
 159             script_mode = SCRIPTLANGUAGEVERSION_ES6;
 160         else if(compat_mode >= COMPAT_MODE_IE9)
 161             script_mode = SCRIPTLANGUAGEVERSION_ES5;
 162         script_mode |= SCRIPTLANGUAGEVERSION_HTML;
 163     }
 164     V_VT(&var) = VT_I4;
 165     V_I4(&var) = script_mode;
 166     if(!set_script_prop(script_host, SCRIPTPROP_INVOKEVERSIONING, &var) && (script_mode & SCRIPTLANGUAGEVERSION_HTML)) {
 167         /* If this failed, we're most likely using native jscript. */
 168         WARN("Failed to set script mode to HTML version.\n");
 169         V_I4(&var) = compat_mode < COMPAT_MODE_IE8 ? SCRIPTLANGUAGEVERSION_5_7 : SCRIPTLANGUAGEVERSION_5_8;
 170         set_script_prop(script_host, SCRIPTPROP_INVOKEVERSIONING, &var);
 171     }
 172
 173     V_VT(&var) = VT_BOOL;
 174     V_BOOL(&var) = VARIANT_TRUE;
 175     set_script_prop(script_host, SCRIPTPROP_HACK_TRIDENTEVENTSINK, &var);
 176
 177     hres = IActiveScriptParse_InitNew(script_host->parse);
 178     if(FAILED(hres)) {
 179         WARN("InitNew failed: %08x\n", hres);
 180         return FALSE;
 181     }
 182
 183     hres = IActiveScript_SetScriptSite(script_host->script, &script_host->IActiveScriptSite_iface);
 184     if(FAILED(hres)) {
 185         WARN("SetScriptSite failed: %08x\n", hres);
 186         IActiveScript_Close(script_host->script);
 187         return FALSE;
 188     }
 189
 190     hres = IActiveScript_GetScriptState(script_host->script, &state);
 191     if(FAILED(hres))
 192         WARN("GetScriptState failed: %08x\n", hres);
 193     else if(state != SCRIPTSTATE_INITIALIZED)
 194         FIXME("state = %x\n", state);
 195
 196     hres = IActiveScript_SetScriptState(script_host->script, SCRIPTSTATE_STARTED);
 197     if(FAILED(hres)) {
 198         WARN("Starting script failed: %08x\n", hres);
 199         return FALSE;
 200     }
 201
 202     hres = IActiveScript_AddNamedItem(script_host->script, L"window",
 203             SCRIPTITEM_ISVISIBLE|SCRIPTITEM_ISSOURCE|SCRIPTITEM_GLOBALMEMBERS);
 204     if(SUCCEEDED(hres)) {
 205         V_VT(&var) = VT_BOOL;
 206         V_BOOL(&var) = VARIANT_TRUE;
 207         set_script_prop(script_host, SCRIPTPROP_ABBREVIATE_GLOBALNAME_RESOLUTION, &var);
 208     }else {
 209        WARN("AddNamedItem failed: %08x\n", hres);
 210     }
 211
 212     hres = IActiveScript_QueryInterface(script_host->script, &IID_IActiveScriptParseProcedure2,
 213                                         (void**)&script_host->parse_proc);
 214     if(FAILED(hres)) {
 215         /* FIXME: QI for IActiveScriptParseProcedure */
 216         WARN("Could not get IActiveScriptParseProcedure iface: %08x\n", hres);
 217     }
 218
 219     return TRUE;
 220 }
 221
 222 static void release_script_engine(ScriptHost *This)
 223 {
 224     if(!This->script)
 225         return;
 226
 227     switch(This->script_state) {
 228     case SCRIPTSTATE_CONNECTED:
 229         IActiveScript_SetScriptState(This->script, SCRIPTSTATE_DISCONNECTED);
 230
 231     case SCRIPTSTATE_STARTED:
 232     case SCRIPTSTATE_DISCONNECTED:
 233     case SCRIPTSTATE_INITIALIZED:
 234         IActiveScript_Close(This->script);
 235
 236     default:
 237         if(This->parse_proc) {
 238             IActiveScriptParseProcedure2_Release(This->parse_proc);
 239             This->parse_proc = NULL;
 240         }
 241
 242         if(This->parse) {
 243             IActiveScriptParse_Release(This->parse);
 244             This->parse = NULL;
 245         }
 246     }
 247
 248     IActiveScript_Release(This->script);
 249     This->script = NULL;
 250     This->script_state = SCRIPTSTATE_UNINITIALIZED;
 251 }
 252
 253 void connect_scripts(HTMLInnerWindow *window)
 254 {
 255     ScriptHost *iter;
 256
 257     LIST_FOR_EACH_ENTRY(iter, &window->script_hosts, ScriptHost, entry) {
 258         if(iter->script_state == SCRIPTSTATE_STARTED)
 259             IActiveScript_SetScriptState(iter->script, SCRIPTSTATE_CONNECTED);
 260     }
 261 }
 262
 263 static inline ScriptHost *impl_from_IActiveScriptSite(IActiveScriptSite *iface)
 264 {
 265     return CONTAINING_RECORD(iface, ScriptHost, IActiveScriptSite_iface);
 266 }
 267
 268 static HRESULT WINAPI ActiveScriptSite_QueryInterface(IActiveScriptSite *iface, REFIID riid, void **ppv)
 269 {
 270     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 271
 272     *ppv = NULL;
 273
 274     if(IsEqualGUID(&IID_IUnknown, riid)) {
 275         TRACE("(%p)->(IID_IUnknown %p)\n", This, ppv);
 276         *ppv = &This->IActiveScriptSite_iface;
 277     }else if(IsEqualGUID(&IID_IActiveScriptSite, riid)) {
 278         TRACE("(%p)->(IID_IActiveScriptSite %p)\n", This, ppv);
 279         *ppv = &This->IActiveScriptSite_iface;
 280     }else if(IsEqualGUID(&IID_IActiveScriptSiteInterruptPoll, riid)) {
 281         TRACE("(%p)->(IID_IActiveScriptSiteInterruprtPoll %p)\n", This, ppv);
 282         *ppv = &This->IActiveScriptSiteInterruptPoll_iface;
 283     }else if(IsEqualGUID(&IID_IActiveScriptSiteWindow, riid)) {
 284         TRACE("(%p)->(IID_IActiveScriptSiteWindow %p)\n", This, ppv);
 285         *ppv = &This->IActiveScriptSiteWindow_iface;
 286     }else if(IsEqualGUID(&IID_IActiveScriptSiteUIControl, riid)) {
 287         TRACE("(%p)->(IID_IActiveScriptSiteUIControl %p)\n", This, ppv);
 288         *ppv = &This->IActiveScriptSiteUIControl_iface;
 289     }else if(IsEqualGUID(&IID_IActiveScriptSiteDebug, riid)) {
 290         TRACE("(%p)->(IID_IActiveScriptSiteDebug %p)\n", This, ppv);
 291         *ppv = &This->IActiveScriptSiteDebug_iface;
 292     }else if(IsEqualGUID(&IID_IServiceProvider, riid)) {
 293         TRACE("(%p)->(IID_IServiceProvider %p)\n", This, ppv);
 294         *ppv = &This->IServiceProvider_iface;
 295     }else if(IsEqualGUID(&IID_ICanHandleException, riid)) {
 296         TRACE("(%p)->(IID_ICanHandleException not supported %p)\n", This, ppv);
 297         return E_NOINTERFACE;
 298     }else {
 299         FIXME("(%p)->(%s %p)\n", This, debugstr_guid(riid), ppv);
 300         return E_NOINTERFACE;
 301     }
 302
 303     IUnknown_AddRef((IUnknown*)*ppv);
 304     return S_OK;
 305 }
 306
 307 static ULONG WINAPI ActiveScriptSite_AddRef(IActiveScriptSite *iface)
 308 {
 309     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 310     LONG ref = InterlockedIncrement(&This->ref);
 311
 312     TRACE("(%p) ref=%d\n", This, ref);
 313
 314     return ref;
 315 }
 316
 317 static ULONG WINAPI ActiveScriptSite_Release(IActiveScriptSite *iface)
 318 {
 319     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 320     LONG ref = InterlockedDecrement(&This->ref);
 321
 322     TRACE("(%p) ref=%d\n", This, ref);
 323
 324     if(!ref) {
 325         release_script_engine(This);
 326         if(This->window)
 327             list_remove(&This->entry);
 328         heap_free(This);
 329     }
 330
 331     return ref;
 332 }
 333
 334 static HRESULT WINAPI ActiveScriptSite_GetLCID(IActiveScriptSite *iface, LCID *plcid)
 335 {
 336     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 337
 338     TRACE("(%p)->(%p)\n", This, plcid);
 339
 340     *plcid = GetUserDefaultLCID();
 341     return S_OK;
 342 }
 343
 344 static HRESULT WINAPI ActiveScriptSite_GetItemInfo(IActiveScriptSite *iface, LPCOLESTR pstrName,
 345         DWORD dwReturnMask, IUnknown **ppiunkItem, ITypeInfo **ppti)
 346 {
 347     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 348
 349     TRACE("(%p)->(%s %x %p %p)\n", This, debugstr_w(pstrName), dwReturnMask, ppiunkItem, ppti);
 350
 351     if(dwReturnMask != SCRIPTINFO_IUNKNOWN) {
 352         FIXME("Unsupported mask %x\n", dwReturnMask);
 353         return E_NOTIMPL;
 354     }
 355
 356     *ppiunkItem = NULL;
 357
 358     if(wcscmp(pstrName, L"window"))
 359         return DISP_E_MEMBERNOTFOUND;
 360
 361     if(!This->window)
 362         return E_FAIL;
 363
 364     /* FIXME: Return proxy object */
 365     *ppiunkItem = (IUnknown*)&This->window->base.IHTMLWindow2_iface;
 366     IUnknown_AddRef(*ppiunkItem);
 367
 368     return S_OK;
 369 }
 370
 371 static HRESULT WINAPI ActiveScriptSite_GetDocVersionString(IActiveScriptSite *iface, BSTR *pbstrVersion)
 372 {
 373     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 374     FIXME("(%p)->(%p)\n", This, pbstrVersion);
 375     return E_NOTIMPL;
 376 }
 377
 378 static HRESULT WINAPI ActiveScriptSite_OnScriptTerminate(IActiveScriptSite *iface,
 379         const VARIANT *pvarResult, const EXCEPINFO *pexcepinfo)
 380 {
 381     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 382     FIXME("(%p)->(%p %p)\n", This, pvarResult, pexcepinfo);
 383     return E_NOTIMPL;
 384 }
 385
 386 static HRESULT WINAPI ActiveScriptSite_OnStateChange(IActiveScriptSite *iface, SCRIPTSTATE ssScriptState)
 387 {
 388     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 389
 390     TRACE("(%p)->(%x)\n", This, ssScriptState);
 391
 392     This->script_state = ssScriptState;
 393     return S_OK;
 394 }
 395
 396 static HRESULT WINAPI ActiveScriptSite_OnScriptError(IActiveScriptSite *iface, IActiveScriptError *pscripterror)
 397 {
 398     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 399     FIXME("(%p)->(%p)\n", This, pscripterror);
 400     return E_NOTIMPL;
 401 }
 402
 403 static HRESULT WINAPI ActiveScriptSite_OnEnterScript(IActiveScriptSite *iface)
 404 {
 405     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 406
 407     TRACE("(%p)->()\n", This);
 408
 409     return S_OK;
 410 }
 411
 412 static HRESULT WINAPI ActiveScriptSite_OnLeaveScript(IActiveScriptSite *iface)
 413 {
 414     ScriptHost *This = impl_from_IActiveScriptSite(iface);
 415
 416     TRACE("(%p)->()\n", This);
 417
 418     return S_OK;
 419 }
 420
 421 static const IActiveScriptSiteVtbl ActiveScriptSiteVtbl = {
 422     ActiveScriptSite_QueryInterface,
 423     ActiveScriptSite_AddRef,
 424     ActiveScriptSite_Release,
 425     ActiveScriptSite_GetLCID,
 426     ActiveScriptSite_GetItemInfo,
 427     ActiveScriptSite_GetDocVersionString,
 428     ActiveScriptSite_OnScriptTerminate,
 429     ActiveScriptSite_OnStateChange,
 430     ActiveScriptSite_OnScriptError,
 431     ActiveScriptSite_OnEnterScript,
 432     ActiveScriptSite_OnLeaveScript
 433 };
 434
 435 static inline ScriptHost *impl_from_IActiveScriptSiteInterruptPoll(IActiveScriptSiteInterruptPoll *iface)
 436 {
 437     return CONTAINING_RECORD(iface, ScriptHost, IActiveScriptSiteInterruptPoll_iface);
 438 }
 439
 440 static HRESULT WINAPI ActiveScriptSiteInterruptPoll_QueryInterface(IActiveScriptSiteInterruptPoll *iface,
 441         REFIID riid, void **ppv)
 442 {
 443     ScriptHost *This = impl_from_IActiveScriptSiteInterruptPoll(iface);
 444     return IActiveScriptSite_QueryInterface(&This->IActiveScriptSite_iface, riid, ppv);
 445 }
 446
 447 static ULONG WINAPI ActiveScriptSiteInterruptPoll_AddRef(IActiveScriptSiteInterruptPoll *iface)
 448 {
 449     ScriptHost *This = impl_from_IActiveScriptSiteInterruptPoll(iface);
 450     return IActiveScriptSite_AddRef(&This->IActiveScriptSite_iface);
 451 }
 452
 453 static ULONG WINAPI ActiveScriptSiteInterruptPoll_Release(IActiveScriptSiteInterruptPoll *iface)
 454 {
 455     ScriptHost *This = impl_from_IActiveScriptSiteInterruptPoll(iface);
 456     return IActiveScriptSite_Release(&This->IActiveScriptSite_iface);
 457 }
 458
 459 static HRESULT WINAPI ActiveScriptSiteInterruptPoll_QueryContinue(IActiveScriptSiteInterruptPoll *iface)
 460 {
 461     ScriptHost *This = impl_from_IActiveScriptSiteInterruptPoll(iface);
 462
 463     TRACE("(%p)\n", This);
 464
 465     return S_OK;
 466 }
 467
 468 static const IActiveScriptSiteInterruptPollVtbl ActiveScriptSiteInterruptPollVtbl = {
 469     ActiveScriptSiteInterruptPoll_QueryInterface,
 470     ActiveScriptSiteInterruptPoll_AddRef,
 471     ActiveScriptSiteInterruptPoll_Release,
 472     ActiveScriptSiteInterruptPoll_QueryContinue
 473 };
 474
 475 static inline ScriptHost *impl_from_IActiveScriptSiteWindow(IActiveScriptSiteWindow *iface)
 476 {
 477     return CONTAINING_RECORD(iface, ScriptHost, IActiveScriptSiteWindow_iface);
 478 }
 479
 480 static HRESULT WINAPI ActiveScriptSiteWindow_QueryInterface(IActiveScriptSiteWindow *iface,
 481         REFIID riid, void **ppv)
 482 {
 483     ScriptHost *This = impl_from_IActiveScriptSiteWindow(iface);
 484     return IActiveScriptSite_QueryInterface(&This->IActiveScriptSite_iface, riid, ppv);
 485 }
 486
 487 static ULONG WINAPI ActiveScriptSiteWindow_AddRef(IActiveScriptSiteWindow *iface)
 488 {
 489     ScriptHost *This = impl_from_IActiveScriptSiteWindow(iface);
 490     return IActiveScriptSite_AddRef(&This->IActiveScriptSite_iface);
 491 }
 492
 493 static ULONG WINAPI ActiveScriptSiteWindow_Release(IActiveScriptSiteWindow *iface)
 494 {
 495     ScriptHost *This = impl_from_IActiveScriptSiteWindow(iface);
 496     return IActiveScriptSite_Release(&This->IActiveScriptSite_iface);
 497 }
 498
 499 static HRESULT WINAPI ActiveScriptSiteWindow_GetWindow(IActiveScriptSiteWindow *iface, HWND *phwnd)
 500 {
 501     ScriptHost *This = impl_from_IActiveScriptSiteWindow(iface);
 502
 503     TRACE("(%p)->(%p)\n", This, phwnd);
 504
 505     if(!This->window || !This->window->base.outer_window)
 506         return E_UNEXPECTED;
 507
 508     *phwnd = This->window->base.outer_window->browser->doc->hwnd;
 509     return S_OK;
 510 }
 511
 512 static HRESULT WINAPI ActiveScriptSiteWindow_EnableModeless(IActiveScriptSiteWindow *iface, BOOL fEnable)
 513 {
 514     ScriptHost *This = impl_from_IActiveScriptSiteWindow(iface);
 515     FIXME("(%p)->(%x)\n", This, fEnable);
 516     return S_OK;
 517 }
 518
 519 static const IActiveScriptSiteWindowVtbl ActiveScriptSiteWindowVtbl = {
 520     ActiveScriptSiteWindow_QueryInterface,
 521     ActiveScriptSiteWindow_AddRef,
 522     ActiveScriptSiteWindow_Release,
 523     ActiveScriptSiteWindow_GetWindow,
 524     ActiveScriptSiteWindow_EnableModeless
 525 };
 526
 527 static inline ScriptHost *impl_from_IActiveScriptSiteUIControl(IActiveScriptSiteUIControl *iface)
 528 {
 529     return CONTAINING_RECORD(iface, ScriptHost, IActiveScriptSiteUIControl_iface);
 530 }
 531
 532 static HRESULT WINAPI ActiveScriptSiteUIControl_QueryInterface(IActiveScriptSiteUIControl *iface, REFIID riid, void **ppv)
 533 {
 534     ScriptHost *This = impl_from_IActiveScriptSiteUIControl(iface);
 535     return IActiveScriptSite_QueryInterface(&This->IActiveScriptSite_iface, riid, ppv);
 536 }
 537
 538 static ULONG WINAPI ActiveScriptSiteUIControl_AddRef(IActiveScriptSiteUIControl *iface)
 539 {
 540     ScriptHost *This = impl_from_IActiveScriptSiteUIControl(iface);
 541     return IActiveScriptSite_AddRef(&This->IActiveScriptSite_iface);
 542 }
 543
 544 static ULONG WINAPI ActiveScriptSiteUIControl_Release(IActiveScriptSiteUIControl *iface)
 545 {
 546     ScriptHost *This = impl_from_IActiveScriptSiteUIControl(iface);
 547     return IActiveScriptSite_Release(&This->IActiveScriptSite_iface);
 548 }
 549
 550 static HRESULT WINAPI ActiveScriptSiteUIControl_GetUIBehavior(IActiveScriptSiteUIControl *iface, SCRIPTUICITEM UicItem,
 551         SCRIPTUICHANDLING *pUicHandling)
 552 {
 553     ScriptHost *This = impl_from_IActiveScriptSiteUIControl(iface);
 554
 555     WARN("(%p)->(%d %p) semi-stub\n", This, UicItem, pUicHandling);
 556
 557     *pUicHandling = SCRIPTUICHANDLING_ALLOW;
 558     return S_OK;
 559 }
 560
 561 static const IActiveScriptSiteUIControlVtbl ActiveScriptSiteUIControlVtbl = {
 562     ActiveScriptSiteUIControl_QueryInterface,
 563     ActiveScriptSiteUIControl_AddRef,
 564     ActiveScriptSiteUIControl_Release,
 565     ActiveScriptSiteUIControl_GetUIBehavior
 566 };
 567
 568 static inline ScriptHost *impl_from_IActiveScriptSiteDebug(IActiveScriptSiteDebug *iface)
 569 {
 570     return CONTAINING_RECORD(iface, ScriptHost, IActiveScriptSiteDebug_iface);
 571 }
 572
 573 static HRESULT WINAPI ActiveScriptSiteDebug_QueryInterface(IActiveScriptSiteDebug *iface,
 574         REFIID riid, void **ppv)
 575 {
 576     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 577     return IActiveScriptSite_QueryInterface(&This->IActiveScriptSite_iface, riid, ppv);
 578 }
 579
 580 static ULONG WINAPI ActiveScriptSiteDebug_AddRef(IActiveScriptSiteDebug *iface)
 581 {
 582     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 583     return IActiveScriptSite_AddRef(&This->IActiveScriptSite_iface);
 584 }
 585
 586 static ULONG WINAPI ActiveScriptSiteDebug_Release(IActiveScriptSiteDebug *iface)
 587 {
 588     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 589     return IActiveScriptSite_Release(&This->IActiveScriptSite_iface);
 590 }
 591
 592 static HRESULT WINAPI ActiveScriptSiteDebug_GetDocumentContextFromPosition(IActiveScriptSiteDebug *iface,
 593             CTXARG_T dwSourceContext, ULONG uCharacterOffset, ULONG uNumChars, IDebugDocumentContext **ppsc)
 594 {
 595     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 596     FIXME("(%p)->(%s %u %u %p)\n", This, wine_dbgstr_longlong(dwSourceContext), uCharacterOffset,
 597           uNumChars, ppsc);
 598     return E_NOTIMPL;
 599 }
 600
 601 static HRESULT WINAPI ActiveScriptSiteDebug_GetApplication(IActiveScriptSiteDebug *iface, IDebugApplication **ppda)
 602 {
 603     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 604     FIXME("(%p)->(%p)\n", This, ppda);
 605     return E_NOTIMPL;
 606 }
 607
 608 static HRESULT WINAPI ActiveScriptSiteDebug_GetRootApplicationNode(IActiveScriptSiteDebug *iface,
 609             IDebugApplicationNode **ppdanRoot)
 610 {
 611     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 612     FIXME("(%p)->(%p)\n", This, ppdanRoot);
 613     return E_NOTIMPL;
 614 }
 615
 616 static HRESULT WINAPI ActiveScriptSiteDebug_OnScriptErrorDebug(IActiveScriptSiteDebug *iface,
 617             IActiveScriptErrorDebug *pErrorDebug, BOOL *pfEnterDebugger, BOOL *pfCallOnScriptErrorWhenContinuing)
 618 {
 619     ScriptHost *This = impl_from_IActiveScriptSiteDebug(iface);
 620     FIXME("(%p)->(%p %p %p)\n", This, pErrorDebug, pfEnterDebugger, pfCallOnScriptErrorWhenContinuing);
 621     return E_NOTIMPL;
 622 }
 623
 624 static const IActiveScriptSiteDebugVtbl ActiveScriptSiteDebugVtbl = {
 625     ActiveScriptSiteDebug_QueryInterface,
 626     ActiveScriptSiteDebug_AddRef,
 627     ActiveScriptSiteDebug_Release,
 628     ActiveScriptSiteDebug_GetDocumentContextFromPosition,
 629     ActiveScriptSiteDebug_GetApplication,
 630     ActiveScriptSiteDebug_GetRootApplicationNode,
 631     ActiveScriptSiteDebug_OnScriptErrorDebug
 632 };
 633
 634 static inline ScriptHost *impl_from_IServiceProvider(IServiceProvider *iface)
 635 {
 636     return CONTAINING_RECORD(iface, ScriptHost, IServiceProvider_iface);
 637 }
 638
 639 static HRESULT WINAPI ASServiceProvider_QueryInterface(IServiceProvider *iface, REFIID riid, void **ppv)
 640 {
 641     ScriptHost *This = impl_from_IServiceProvider(iface);
 642     return IActiveScriptSite_QueryInterface(&This->IActiveScriptSite_iface, riid, ppv);
 643 }
 644
 645 static ULONG WINAPI ASServiceProvider_AddRef(IServiceProvider *iface)
 646 {
 647     ScriptHost *This = impl_from_IServiceProvider(iface);
 648     return IActiveScriptSite_AddRef(&This->IActiveScriptSite_iface);
 649 }
 650
 651 static ULONG WINAPI ASServiceProvider_Release(IServiceProvider *iface)
 652 {
 653     ScriptHost *This = impl_from_IServiceProvider(iface);
 654     return IActiveScriptSite_Release(&This->IActiveScriptSite_iface);
 655 }
 656
 657 static HRESULT WINAPI ASServiceProvider_QueryService(IServiceProvider *iface, REFGUID guidService,
 658         REFIID riid, void **ppv)
 659 {
 660     ScriptHost *This = impl_from_IServiceProvider(iface);
 661
 662     if(IsEqualGUID(&SID_SInternetHostSecurityManager, guidService)) {
 663         TRACE("(%p)->(SID_SInternetHostSecurityManager)\n", This);
 664
 665         if(!This->window || !This->window->doc)
 666             return E_NOINTERFACE;
 667
 668         return IInternetHostSecurityManager_QueryInterface(&This->window->doc->IInternetHostSecurityManager_iface,
 669                 riid, ppv);
 670     }
 671
 672     if(IsEqualGUID(&SID_SContainerDispatch, guidService)) {
 673         TRACE("(%p)->(SID_SContainerDispatch)\n", This);
 674
 675         if(!This->window || !This->window->doc)
 676             return E_NOINTERFACE;
 677
 678         return IHTMLDocument2_QueryInterface(&This->window->doc->basedoc.IHTMLDocument2_iface, riid, ppv);
 679     }
 680
 681     FIXME("(%p)->(%s %s %p)\n", This, debugstr_guid(guidService), debugstr_guid(riid), ppv);
 682     return E_NOINTERFACE;
 683 }
 684
 685 static const IServiceProviderVtbl ASServiceProviderVtbl = {
 686     ASServiceProvider_QueryInterface,
 687     ASServiceProvider_AddRef,
 688     ASServiceProvider_Release,
 689     ASServiceProvider_QueryService
 690 };
 691
 692 static ScriptHost *create_script_host(HTMLInnerWindow *window, const GUID *guid)
 693 {
 694     ScriptHost *ret;
 695     HRESULT hres;
 696
 697     ret = heap_alloc_zero(sizeof(*ret));
 698     if(!ret)
 699         return NULL;
 700
 701     ret->IActiveScriptSite_iface.lpVtbl = &ActiveScriptSiteVtbl;
 702     ret->IActiveScriptSiteInterruptPoll_iface.lpVtbl = &ActiveScriptSiteInterruptPollVtbl;
 703     ret->IActiveScriptSiteWindow_iface.lpVtbl = &ActiveScriptSiteWindowVtbl;
 704     ret->IActiveScriptSiteUIControl_iface.lpVtbl = &ActiveScriptSiteUIControlVtbl;
 705     ret->IActiveScriptSiteDebug_iface.lpVtbl = &ActiveScriptSiteDebugVtbl;
 706     ret->IServiceProvider_iface.lpVtbl = &ASServiceProviderVtbl;
 707     ret->ref = 1;
 708     ret->window = window;
 709     ret->script_state = SCRIPTSTATE_UNINITIALIZED;
 710
 711     ret->guid = *guid;
 712     list_add_tail(&window->script_hosts, &ret->entry);
 713
 714     hres = CoCreateInstance(&ret->guid, NULL, CLSCTX_INPROC_SERVER|CLSCTX_INPROC_HANDLER,
 715             &IID_IActiveScript, (void**)&ret->script);
 716     if(FAILED(hres))
 717         WARN("Could not load script engine: %08x\n", hres);
 718     else if(!init_script_engine(ret))
 719         release_script_engine(ret);
 720
 721     return ret;
 722 }
 723
 724 static void dispatch_script_readystatechange_event(HTMLScriptElement *script)
 725 {
 726     DOMEvent *event;
 727     HRESULT hres;
 728
 729     if(script->readystate != READYSTATE_LOADED ||
 730        dispex_compat_mode(&script->element.node.event_target.dispex) < COMPAT_MODE_IE10) {
 731         hres = create_document_event(script->element.node.doc, EVENTID_READYSTATECHANGE, &event);
 732         if(SUCCEEDED(hres)) {
 733             dispatch_event(&script->element.node.event_target, event);
 734             IDOMEvent_Release(&event->IDOMEvent_iface);
 735         }
 736     }
 737
 738     if(script->readystate == READYSTATE_LOADED) {
 739         hres = create_document_event(script->element.node.doc, EVENTID_LOAD, &event);
 740         if(SUCCEEDED(hres)) {
 741             dispatch_event(&script->element.node.event_target, event);
 742             IDOMEvent_Release(&event->IDOMEvent_iface);
 743         }
 744     }
 745 }
 746
 747 typedef struct {
 748     task_t header;
 749     HTMLScriptElement *elem;
 750 } fire_readystatechange_task_t;
 751
 752 static void fire_readystatechange_proc(task_t *_task)
 753 {
 754     fire_readystatechange_task_t *task = (fire_readystatechange_task_t*)_task;
 755
 756     if(!task->elem->pending_readystatechange_event)
 757         return;
 758
 759     task->elem->pending_readystatechange_event = FALSE;
 760     dispatch_script_readystatechange_event(task->elem);
 761 }
 762
 763 static void fire_readystatechange_task_destr(task_t *_task)
 764 {
 765     fire_readystatechange_task_t *task = (fire_readystatechange_task_t*)_task;
 766
 767     IHTMLScriptElement_Release(&task->elem->IHTMLScriptElement_iface);
 768 }
 769
 770 static void set_script_elem_readystate(HTMLScriptElement *script_elem, READYSTATE readystate)
 771 {
 772     script_elem->readystate = readystate;
 773
 774     if(readystate != READYSTATE_LOADED &&
 775        dispex_compat_mode(&script_elem->element.node.event_target.dispex) >= COMPAT_MODE_IE11)
 776         return;
 777
 778     if(readystate != READYSTATE_INTERACTIVE) {
 779         if(!script_elem->element.node.doc->window->parser_callback_cnt) {
 780             fire_readystatechange_task_t *task;
 781             HRESULT hres;
 782
 783             if(script_elem->pending_readystatechange_event)
 784                 return;
 785
 786             task = heap_alloc(sizeof(*task));
 787             if(!task)
 788                 return;
 789
 790             IHTMLScriptElement_AddRef(&script_elem->IHTMLScriptElement_iface);
 791             task->elem = script_elem;
 792
 793             hres = push_task(&task->header, fire_readystatechange_proc, fire_readystatechange_task_destr,
 794                     script_elem->element.node.doc->window->task_magic);
 795             if(SUCCEEDED(hres))
 796                 script_elem->pending_readystatechange_event = TRUE;
 797         }else {
 798             script_elem->pending_readystatechange_event = FALSE;
 799             dispatch_script_readystatechange_event(script_elem);
 800         }
 801     }
 802 }
 803
 804 static void parse_elem_text(ScriptHost *script_host, HTMLScriptElement *script_elem, LPCWSTR text)
 805 {
 806     EXCEPINFO excepinfo;
 807     VARIANT var;
 808     HRESULT hres;
 809
 810     TRACE("%s\n", debugstr_w(text));
 811
 812     VariantInit(&var);
 813     memset(&excepinfo, 0, sizeof(excepinfo));
 814     TRACE(">>>\n");
 815     hres = IActiveScriptParse_ParseScriptText(script_host->parse, text, L"window", NULL, L"</SCRIPT>",
 816                                               0, 0, SCRIPTTEXT_ISVISIBLE|SCRIPTTEXT_HOSTMANAGESSOURCE,
 817                                               &var, &excepinfo);
 818     if(SUCCEEDED(hres))
 819         TRACE("<<<\n");
 820     else
 821         WARN("<<< %08x\n", hres);
 822 }
 823
 824 typedef struct {
 825     BSCallback bsc;
 826
 827     HTMLScriptElement *script_elem;
 828     nsILoadGroup *load_group;
 829     nsIRequest *request;
 830     DWORD scheme;
 831
 832     DWORD size;
 833     char *buf;
 834 } ScriptBSC;
 835
 836 static HRESULT get_binding_text(ScriptBSC *bsc, WCHAR **ret)
 837 {
 838     UINT cp = CP_UTF8;
 839     WCHAR *text;
 840
 841     if(!bsc->bsc.read) {
 842         text = heap_alloc(sizeof(WCHAR));
 843         if(!text)
 844             return E_OUTOFMEMORY;
 845         *text = 0;
 846         *ret = text;
 847         return S_OK;
 848     }
 849
 850     switch(bsc->bsc.bom) {
 851     case BOM_UTF16:
 852         if(bsc->bsc.read % sizeof(WCHAR)) {
 853             FIXME("The buffer is not a valid utf16 string\n");
 854             return E_FAIL;
 855         }
 856
 857         text = heap_alloc(bsc->bsc.read+sizeof(WCHAR));
 858         if(!text)
 859             return E_OUTOFMEMORY;
 860
 861         memcpy(text, bsc->buf, bsc->bsc.read);
 862         text[bsc->bsc.read/sizeof(WCHAR)] = 0;
 863         break;
 864
 865     default:
 866         /* FIXME: Try to use charset from HTTP headers first */
 867         cp = get_document_charset(bsc->script_elem->element.node.doc);
 868         /* fall through */
 869     case BOM_UTF8: {
 870         DWORD len;
 871
 872         len = MultiByteToWideChar(cp, 0, bsc->buf, bsc->bsc.read, NULL, 0);
 873         text = heap_alloc((len+1)*sizeof(WCHAR));
 874         if(!text)
 875             return E_OUTOFMEMORY;
 876
 877         MultiByteToWideChar(cp, 0, bsc->buf, bsc->bsc.read, text, len);
 878         text[len] = 0;
 879     }
 880     }
 881
 882     *ret = text;
 883     return S_OK;
 884 }
 885
 886 static void script_file_available(ScriptBSC *bsc)
 887 {
 888     HTMLScriptElement *script_elem = bsc->script_elem;
 889     HTMLInnerWindow *window = bsc->bsc.window;
 890     ScriptHost *script_host;
 891     nsIDOMNode *parent;
 892     nsresult nsres;
 893     HRESULT hres;
 894
 895     assert(window != NULL);
 896
 897     hres = get_binding_text(bsc, &script_elem->src_text);
 898     if(FAILED(hres))
 899         return;
 900
 901     script_host = get_elem_script_host(window, script_elem);
 902     if(!script_host)
 903         return;
 904
 905     if(window->parser_callback_cnt) {
 906         script_queue_entry_t *queue;
 907
 908         TRACE("Adding to queue\n");
 909
 910         queue = heap_alloc(sizeof(*queue));
 911         if(!queue)
 912             return;
 913
 914         IHTMLScriptElement_AddRef(&script_elem->IHTMLScriptElement_iface);
 915         queue->script = script_elem;
 916
 917         list_add_tail(&window->script_queue, &queue->entry);
 918         return;
 919     }
 920
 921     nsres = nsIDOMElement_GetParentNode(script_elem->element.dom_element, &parent);
 922     if(NS_FAILED(nsres) || !parent) {
 923         TRACE("No parent, not executing\n");
 924         script_elem->parse_on_bind = TRUE;
 925         return;
 926     }
 927
 928     nsIDOMNode_Release(parent);
 929
 930     script_host = get_elem_script_host(window, script_elem);
 931     if(!script_host)
 932         return;
 933
 934     script_elem->parsed = TRUE;
 935     if(script_host->parse)
 936         parse_elem_text(script_host, script_elem, script_elem->src_text);
 937 }
 938
 939 static inline ScriptBSC *impl_from_BSCallback(BSCallback *iface)
 940 {
 941     return CONTAINING_RECORD(iface, ScriptBSC, bsc);
 942 }
 943
 944 static void ScriptBSC_destroy(BSCallback *bsc)
 945 {
 946     ScriptBSC *This = impl_from_BSCallback(bsc);
 947
 948     if(This->script_elem) {
 949         IHTMLScriptElement_Release(&This->script_elem->IHTMLScriptElement_iface);
 950         This->script_elem = NULL;
 951     }
 952
 953     if(This->request) {
 954         ERR("Unfinished request\n");
 955         nsIRequest_Release(This->request);
 956     }
 957     if(This->load_group)
 958         nsILoadGroup_Release(This->load_group);
 959
 960     heap_free(This->buf);
 961     heap_free(This);
 962 }
 963
 964 static HRESULT ScriptBSC_init_bindinfo(BSCallback *bsc)
 965 {
 966     return S_OK;
 967 }
 968
 969 static HRESULT ScriptBSC_start_binding(BSCallback *bsc)
 970 {
 971     ScriptBSC *This = impl_from_BSCallback(bsc);
 972     nsresult nsres;
 973
 974     This->script_elem->binding = &This->bsc;
 975
 976     if(This->load_group) {
 977         nsres = create_onload_blocker_request(&This->request);
 978         if(NS_SUCCEEDED(nsres)) {
 979             nsres = nsILoadGroup_AddRequest(This->load_group, This->request, NULL);
 980             if(NS_FAILED(nsres))
 981                 ERR("AddRequest failed: %08x\n", nsres);
 982         }
 983     }
 984
 985     /* FIXME: We should find a better to decide if 'loading' state is supposed to be used by the protocol. */
 986     if(This->scheme == URL_SCHEME_HTTPS || This->scheme == URL_SCHEME_HTTP)
 987         set_script_elem_readystate(This->script_elem, READYSTATE_LOADING);
 988
 989     return S_OK;
 990 }
 991
 992 static HRESULT ScriptBSC_stop_binding(BSCallback *bsc, HRESULT result)
 993 {
 994     ScriptBSC *This = impl_from_BSCallback(bsc);
 995     nsresult nsres;
 996
 997     if(SUCCEEDED(result) && !This->script_elem)
 998         result = E_UNEXPECTED;
 999
1000     assert(FAILED(result) || This->script_elem->binding == &This->bsc);
1001     This->script_elem->binding = NULL;
1002
1003     if(This->script_elem->readystate == READYSTATE_LOADING)
1004         set_script_elem_readystate(This->script_elem, READYSTATE_LOADED);
1005
1006     if(SUCCEEDED(result)) {
1007         script_file_available(This);
1008     }else {
1009         FIXME("binding failed %08x\n", result);
1010         heap_free(This->buf);
1011         This->buf = NULL;
1012         This->size = 0;
1013     }
1014
1015     if(This->request) {
1016         nsres = nsILoadGroup_RemoveRequest(This->load_group, This->request, NULL, NS_OK);
1017         if(NS_FAILED(nsres))
1018             ERR("RemoveRequest failed: %08x\n", nsres);
1019         nsIRequest_Release(This->request);
1020         This->request = NULL;
1021     }
1022
1023     IHTMLScriptElement_Release(&This->script_elem->IHTMLScriptElement_iface);
1024     This->script_elem = NULL;
1025     return S_OK;
1026 }
1027
1028 static HRESULT ScriptBSC_read_data(BSCallback *bsc, IStream *stream)
1029 {
1030     ScriptBSC *This = impl_from_BSCallback(bsc);
1031     DWORD read;
1032     HRESULT hres;
1033
1034     if(!This->buf) {
1035         This->buf = heap_alloc(128);
1036         if(!This->buf)
1037             return E_OUTOFMEMORY;
1038         This->size = 128;
1039     }
1040
1041     do {
1042         if(This->bsc.read >= This->size) {
1043             void *new_buf;
1044             new_buf = heap_realloc(This->buf, This->size << 1);
1045             if(!new_buf)
1046                 return E_OUTOFMEMORY;
1047             This->size <<= 1;
1048             This->buf = new_buf;
1049         }
1050
1051         hres = read_stream(&This->bsc, stream, This->buf+This->bsc.read, This->size-This->bsc.read, &read);
1052     }while(hres == S_OK);
1053
1054     return S_OK;
1055 }
1056
1057 static HRESULT ScriptBSC_on_progress(BSCallback *bsc, ULONG status_code, LPCWSTR status_text)
1058 {
1059     return S_OK;
1060 }
1061
1062 static HRESULT ScriptBSC_on_response(BSCallback *bsc, DWORD response_code,
1063         LPCWSTR response_headers)
1064 {
1065     return S_OK;
1066 }
1067
1068 static HRESULT ScriptBSC_beginning_transaction(BSCallback *bsc, WCHAR **additional_headers)
1069 {
1070     return S_FALSE;
1071 }
1072
1073 static const BSCallbackVtbl ScriptBSCVtbl = {
1074     ScriptBSC_destroy,
1075     ScriptBSC_init_bindinfo,
1076     ScriptBSC_start_binding,
1077     ScriptBSC_stop_binding,
1078     ScriptBSC_read_data,
1079     ScriptBSC_on_progress,
1080     ScriptBSC_on_response,
1081     ScriptBSC_beginning_transaction
1082 };
1083
1084
1085 HRESULT load_script(HTMLScriptElement *script_elem, const WCHAR *src, BOOL async)
1086 {
1087     HTMLInnerWindow *window;
1088     ScriptBSC *bsc;
1089     IMoniker *mon;
1090     IUri *uri;
1091     HRESULT hres;
1092
1093     static const WCHAR wine_schemaW[] = {'w','i','n','e',':'};
1094
1095     if(lstrlenW(src) > ARRAY_SIZE(wine_schemaW) && !memcmp(src, wine_schemaW, sizeof(wine_schemaW)))
1096         src += ARRAY_SIZE(wine_schemaW);
1097
1098     TRACE("(%p %s %x)\n", script_elem, debugstr_w(src), async);
1099
1100     if(!script_elem->element.node.doc || !(window = script_elem->element.node.doc->window)) {
1101         ERR("no window\n");
1102         return E_UNEXPECTED;
1103     }
1104
1105     hres = create_uri(src, 0, &uri);
1106     if(FAILED(hres))
1107         return hres;
1108
1109     hres = CreateURLMonikerEx2(NULL, uri, &mon, URL_MK_UNIFORM);
1110     if(FAILED(hres)) {
1111         IUri_Release(uri);
1112         return hres;
1113     }
1114
1115     bsc = heap_alloc_zero(sizeof(*bsc));
1116     if(!bsc) {
1117         IMoniker_Release(mon);
1118         IUri_Release(uri);
1119         return E_OUTOFMEMORY;
1120     }
1121
1122     init_bscallback(&bsc->bsc, &ScriptBSCVtbl, mon, async ? BINDF_ASYNCHRONOUS | BINDF_ASYNCSTORAGE | BINDF_PULLDATA : 0);
1123     IMoniker_Release(mon);
1124
1125     hres = IUri_GetScheme(uri, &bsc->scheme);
1126     IUri_Release(uri);
1127     if(FAILED(hres))
1128         bsc->scheme = URL_SCHEME_UNKNOWN;
1129
1130     IHTMLScriptElement_AddRef(&script_elem->IHTMLScriptElement_iface);
1131     bsc->script_elem = script_elem;
1132
1133     if(window->bscallback && window->bscallback->nschannel &&
1134        window->bscallback->nschannel->load_group) {
1135         cpp_bool contains;
1136         nsresult nsres;
1137
1138         nsres = nsIDOMNode_Contains(script_elem->element.node.doc->node.nsnode,
1139                                     script_elem->element.node.nsnode, &contains);
1140         if(NS_SUCCEEDED(nsres) && contains) {
1141             TRACE("script %p will block load event\n", script_elem);
1142             bsc->load_group = window->bscallback->nschannel->load_group;
1143             nsILoadGroup_AddRef(bsc->load_group);
1144         }
1145     }
1146
1147     hres = start_binding(window, &bsc->bsc, NULL);
1148
1149     IBindStatusCallback_Release(&bsc->bsc.IBindStatusCallback_iface);
1150     return hres;
1151 }
1152
1153 static void parse_inline_script(ScriptHost *script_host, HTMLScriptElement *script_elem)
1154 {
1155     const PRUnichar *text;
1156     nsAString text_str;
1157     nsresult nsres;
1158
1159     nsAString_Init(&text_str, NULL);
1160     nsres = nsIDOMHTMLScriptElement_GetText(script_elem->nsscript, &text_str);
1161     nsAString_GetData(&text_str, &text);
1162
1163     set_script_elem_readystate(script_elem, READYSTATE_INTERACTIVE);
1164
1165     if(NS_FAILED(nsres)) {
1166         ERR("GetText failed: %08x\n", nsres);
1167     }else if(*text) {
1168         parse_elem_text(script_host, script_elem, text);
1169     }
1170
1171     nsAString_Finish(&text_str);
1172 }
1173
1174 static BOOL parse_script_elem(ScriptHost *script_host, HTMLScriptElement *script_elem)
1175 {
1176     nsAString src_str, event_str;
1177     BOOL is_complete = FALSE;
1178     const PRUnichar *src;
1179     nsresult nsres;
1180
1181     nsAString_Init(&event_str, NULL);
1182     nsres = nsIDOMHTMLScriptElement_GetEvent(script_elem->nsscript, &event_str);
1183     if(NS_SUCCEEDED(nsres)) {
1184         const PRUnichar *event;
1185
1186         nsAString_GetData(&event_str, &event);
1187         if(*event) {
1188             TRACE("deferring event %s script evaluation\n", debugstr_w(event));
1189             nsAString_Finish(&event_str);
1190             return FALSE;
1191         }
1192     }else {
1193         ERR("GetEvent failed: %08x\n", nsres);
1194     }
1195     nsAString_Finish(&event_str);
1196
1197     nsAString_Init(&src_str, NULL);
1198     nsres = nsIDOMHTMLScriptElement_GetSrc(script_elem->nsscript, &src_str);
1199     nsAString_GetData(&src_str, &src);
1200
1201     if(NS_FAILED(nsres)) {
1202         ERR("GetSrc failed: %08x\n", nsres);
1203     }else if(*src) {
1204         load_script(script_elem, src, FALSE);
1205         is_complete = script_elem->parsed;
1206     }else {
1207         parse_inline_script(script_host, script_elem);
1208         is_complete = TRUE;
1209     }
1210
1211     nsAString_Finish(&src_str);
1212
1213     return is_complete;
1214 }
1215
1216 static GUID get_default_script_guid(HTMLInnerWindow *window)
1217 {
1218     /* If not specified, we should use very first script host that was created for the page (or JScript if none) */
1219     return list_empty(&window->script_hosts)
1220         ? CLSID_JScript
1221         : LIST_ENTRY(list_head(&window->script_hosts), ScriptHost, entry)->guid;
1222 }
1223
1224 static BOOL get_guid_from_type(LPCWSTR type, GUID *guid)
1225 {
1226     /* FIXME: Handle more types */
1227     if(!wcsicmp(type, L"text/javascript") || !wcsicmp(type, L"text/jscript")) {
1228         *guid = CLSID_JScript;
1229     }else if(!wcsicmp(type, L"text/vbscript")) {
1230         *guid = CLSID_VBScript;
1231     }else {
1232         FIXME("Unknown type %s\n", debugstr_w(type));
1233         return FALSE;
1234     }
1235
1236     return TRUE;
1237 }
1238
1239 static BOOL get_guid_from_language(LPCWSTR type, GUID *guid)
1240 {
1241     HRESULT hres;
1242
1243     hres = CLSIDFromProgID(type, guid);
1244     if(FAILED(hres))
1245         return FALSE;
1246
1247     /* FIXME: Check CATID_ActiveScriptParse */
1248
1249     return TRUE;
1250 }
1251
1252 static BOOL get_script_guid(HTMLInnerWindow *window, nsIDOMHTMLScriptElement *nsscript, GUID *guid)
1253 {
1254     nsIDOMElement *nselem;
1255     const PRUnichar *language;
1256     nsAString val_str;
1257     BOOL ret = FALSE;
1258     nsresult nsres;
1259
1260     nsAString_Init(&val_str, NULL);
1261
1262     nsres = nsIDOMHTMLScriptElement_GetType(nsscript, &val_str);
1263     if(NS_SUCCEEDED(nsres)) {
1264         const PRUnichar *type;
1265
1266         nsAString_GetData(&val_str, &type);
1267         if(*type) {
1268             ret = get_guid_from_type(type, guid);
1269             nsAString_Finish(&val_str);
1270             return ret;
1271         }
1272     }else {
1273         ERR("GetType failed: %08x\n", nsres);
1274     }
1275
1276     nsres = nsIDOMHTMLScriptElement_QueryInterface(nsscript, &IID_nsIDOMElement, (void**)&nselem);
1277     assert(nsres == NS_OK);
1278
1279     nsres = get_elem_attr_value(nselem, L"language", &val_str, &language);
1280     nsIDOMElement_Release(nselem);
1281     if(NS_SUCCEEDED(nsres)) {
1282         if(*language) {
1283             ret = get_guid_from_language(language, guid);
1284         }else {
1285             *guid = get_default_script_guid(window);
1286             ret = TRUE;
1287         }
1288         nsAString_Finish(&val_str);
1289     }
1290
1291     return ret;
1292 }
1293
1294 static ScriptHost *get_script_host(HTMLInnerWindow *window, const GUID *guid)
1295 {
1296     ScriptHost *iter;
1297
1298     LIST_FOR_EACH_ENTRY(iter, &window->script_hosts, ScriptHost, entry) {
1299         if(IsEqualGUID(guid, &iter->guid))
1300             return iter;
1301     }
1302
1303     return create_script_host(window, guid);
1304 }
1305
1306 static ScriptHost *get_elem_script_host(HTMLInnerWindow *window, HTMLScriptElement *script_elem)
1307 {
1308     GUID guid;
1309
1310     if(!get_script_guid(window, script_elem->nsscript, &guid)) {
1311         WARN("Could not find script GUID\n");
1312         return NULL;
1313     }
1314
1315     if(IsEqualGUID(&CLSID_JScript, &guid) && (!window->doc->browser || window->doc->browser->script_mode != SCRIPTMODE_ACTIVESCRIPT)) {
1316         TRACE("Ignoring JScript\n");
1317         return NULL;
1318     }
1319
1320     return get_script_host(window, &guid);
1321 }
1322
1323 void doc_insert_script(HTMLInnerWindow *window, HTMLScriptElement *script_elem, BOOL from_parser)
1324 {
1325     ScriptHost *script_host;
1326     BOOL is_complete = FALSE;
1327
1328     script_host = get_elem_script_host(window, script_elem);
1329     if(!script_host)
1330         return;
1331
1332     if(script_host->parse) {
1333         if(script_elem->src_text) {
1334             if(from_parser)
1335                 set_script_elem_readystate(script_elem, READYSTATE_INTERACTIVE);
1336             script_elem->parsed = TRUE;
1337             parse_elem_text(script_host, script_elem, script_elem->src_text);
1338             is_complete = TRUE;
1339         }else if(!script_elem->binding) {
1340             is_complete = parse_script_elem(script_host, script_elem);
1341         }
1342     }
1343
1344     if(is_complete)
1345         set_script_elem_readystate(script_elem, READYSTATE_COMPLETE);
1346 }
1347
1348 IDispatch *script_parse_event(HTMLInnerWindow *window, LPCWSTR text)
1349 {
1350     ScriptHost *script_host;
1351     GUID guid;
1352     const WCHAR *ptr;
1353     IDispatch *disp;
1354     HRESULT hres;
1355
1356     TRACE("%s\n", debugstr_w(text));
1357
1358     for(ptr = text; iswalnum(*ptr); ptr++);
1359     if(*ptr == ':') {
1360         LPWSTR language;
1361         BOOL b;
1362
1363         language = heap_alloc((ptr-text+1)*sizeof(WCHAR));
1364         if(!language)
1365             return NULL;
1366
1367         memcpy(language, text, (ptr-text)*sizeof(WCHAR));
1368         language[ptr-text] = 0;
1369
1370         b = get_guid_from_language(language, &guid);
1371
1372         heap_free(language);
1373
1374         if(!b) {
1375             WARN("Could not find language\n");
1376             return NULL;
1377         }
1378
1379         ptr++;
1380     }else {
1381         ptr = text;
1382         guid = get_default_script_guid(window);
1383     }
1384
1385     if(IsEqualGUID(&CLSID_JScript, &guid)
1386        && (!window->doc->browser || window->doc->browser->script_mode != SCRIPTMODE_ACTIVESCRIPT)) {
1387         TRACE("Ignoring JScript\n");
1388         return NULL;
1389     }
1390
1391     script_host = get_script_host(window, &guid);
1392     if(!script_host || !script_host->parse_proc)
1393         return NULL;
1394
1395     hres = IActiveScriptParseProcedure2_ParseProcedureText(script_host->parse_proc, ptr, NULL, L"",
1396             NULL, NULL, L"\"", 0 /* FIXME */, 0,
1397             SCRIPTPROC_HOSTMANAGESSOURCE|SCRIPTPROC_IMPLICIT_THIS|SCRIPTPROC_IMPLICIT_PARENTS, &disp);
1398     if(FAILED(hres)) {
1399         WARN("ParseProcedureText failed: %08x\n", hres);
1400         return NULL;
1401     }
1402
1403     TRACE("ret %p\n", disp);
1404     return disp;
1405 }
1406
1407 HRESULT exec_script(HTMLInnerWindow *window, const WCHAR *code, const WCHAR *lang, VARIANT *ret)
1408 {
1409     ScriptHost *script_host;
1410     EXCEPINFO ei;
1411     GUID guid;
1412     HRESULT hres;
1413
1414     if(!get_guid_from_language(lang, &guid)) {
1415         WARN("Could not find script GUID\n");
1416         return CO_E_CLASSSTRING;
1417     }
1418
1419     script_host = get_script_host(window, &guid);
1420     if(!script_host) {
1421         FIXME("No script host\n");
1422         return E_FAIL;
1423     }
1424
1425     if(!script_host->parse) {
1426         FIXME("script_host->parse == NULL\n");
1427         return E_FAIL;
1428     }
1429
1430     memset(&ei, 0, sizeof(ei));
1431     TRACE(">>>\n");
1432     hres = IActiveScriptParse_ParseScriptText(script_host->parse, code, NULL, NULL, L"\"", 0, 0, SCRIPTTEXT_ISVISIBLE, ret, &ei);
1433     if(SUCCEEDED(hres))
1434         TRACE("<<<\n");
1435     else
1436         WARN("<<< %08x\n", hres);
1437
1438     return hres;
1439 }
1440
1441 IDispatch *get_script_disp(ScriptHost *script_host)
1442 {
1443     IDispatch *disp;
1444     HRESULT hres;
1445
1446     if(!script_host->script)
1447         return NULL;
1448
1449     hres = IActiveScript_GetScriptDispatch(script_host->script, L"window", &disp);
1450     if(FAILED(hres))
1451         return NULL;
1452
1453     return disp;
1454 }
1455
1456 static EventTarget *find_event_target(HTMLDocumentNode *doc, HTMLScriptElement *script_elem)
1457 {
1458     EventTarget *event_target = NULL;
1459     const PRUnichar *target_id;
1460     nsAString target_id_str;
1461     nsresult nsres;
1462     HRESULT hres;
1463
1464     nsAString_Init(&target_id_str, NULL);
1465     nsres = nsIDOMHTMLScriptElement_GetHtmlFor(script_elem->nsscript, &target_id_str);
1466     if(NS_FAILED(nsres)) {
1467         ERR("GetScriptFor failed: %08x\n", nsres);
1468         nsAString_Finish(&target_id_str);
1469         return NULL;
1470     }
1471
1472     nsAString_GetData(&target_id_str, &target_id);
1473     if(!*target_id) {
1474         FIXME("Empty for attribute\n");
1475     }else if(!wcscmp(target_id, L"document")) {
1476         event_target = &doc->node.event_target;
1477         htmldoc_addref(&doc->basedoc);
1478     }else if(!wcscmp(target_id, L"window")) {
1479         if(doc->window) {
1480             event_target = &doc->window->event_target;
1481             IDispatchEx_AddRef(&event_target->dispex.IDispatchEx_iface);
1482         }
1483     }else {
1484         HTMLElement *target_elem;
1485
1486         hres = get_doc_elem_by_id(doc, target_id, &target_elem);
1487         if(SUCCEEDED(hres) && target_elem) {
1488             event_target = &target_elem->node.event_target;
1489         }
1490     }
1491
1492     nsAString_Finish(&target_id_str);
1493     return event_target;
1494 }
1495
1496 static BOOL parse_event_str(WCHAR *event, const WCHAR **args)
1497 {
1498     WCHAR *ptr;
1499
1500     TRACE("%s\n", debugstr_w(event));
1501
1502     for(ptr = event; iswalnum(*ptr); ptr++);
1503     if(!*ptr) {
1504         *args = NULL;
1505         return TRUE;
1506     }
1507
1508     if(*ptr != '(')
1509         return FALSE;
1510
1511     *ptr++ = 0;
1512     *args = ptr;
1513     while(iswalnum(*ptr) || iswspace(*ptr) || *ptr == ',')
1514         ptr++;
1515
1516     if(*ptr != ')')
1517         return FALSE;
1518
1519     *ptr++ = 0;
1520     return !*ptr;
1521 }
1522
1523 static IDispatch *parse_event_elem(HTMLDocumentNode *doc, HTMLScriptElement *script_elem, WCHAR **ret_event)
1524 {
1525     ScriptHost *script_host;
1526     WCHAR *event = NULL;
1527     const WCHAR *args;
1528     nsAString nsstr;
1529     IDispatch *disp;
1530     nsresult nsres;
1531     HRESULT hres;
1532
1533     if(script_elem->parsed)
1534         return NULL;
1535
1536     script_host = get_elem_script_host(doc->window, script_elem);
1537     if(!script_host || !script_host->parse_proc)
1538         return NULL;
1539
1540     nsAString_Init(&nsstr, NULL);
1541     nsres = nsIDOMHTMLScriptElement_GetEvent(script_elem->nsscript, &nsstr);
1542     if(NS_SUCCEEDED(nsres)) {
1543         const PRUnichar *event_val;
1544
1545         nsAString_GetData(&nsstr, &event_val);
1546         event = heap_strdupW(event_val);
1547     }
1548     nsAString_Finish(&nsstr);
1549     if(!event)
1550         return NULL;
1551
1552     if(!parse_event_str(event, &args)) {
1553         WARN("parsing %s failed\n", debugstr_w(event));
1554         heap_free(event);
1555         return NULL;
1556     }
1557
1558     nsAString_Init(&nsstr, NULL);
1559     nsres = nsIDOMHTMLScriptElement_GetText(script_elem->nsscript, &nsstr);
1560     if(NS_SUCCEEDED(nsres)) {
1561         const PRUnichar *text;
1562
1563         nsAString_GetData(&nsstr, &text);
1564         hres = IActiveScriptParseProcedure2_ParseProcedureText(script_host->parse_proc, text, args,
1565                 L"", NULL, NULL, L"</SCRIPT>", 0, 0,
1566                 SCRIPTPROC_HOSTMANAGESSOURCE|SCRIPTPROC_IMPLICIT_THIS|SCRIPTPROC_IMPLICIT_PARENTS, &disp);
1567         if(FAILED(hres))
1568             disp = NULL;
1569     }else {
1570         ERR("GetText failed: %08x\n", nsres);
1571         disp = NULL;
1572     }
1573     nsAString_Finish(&nsstr);
1574     if(!disp) {
1575         heap_free(event);
1576         return NULL;
1577     }
1578
1579     *ret_event = event;
1580     return disp;
1581 }
1582
1583 void bind_event_scripts(HTMLDocumentNode *doc)
1584 {
1585     HTMLPluginContainer *plugin_container;
1586     nsIDOMHTMLScriptElement *nsscript;
1587     HTMLScriptElement *script_elem;
1588     EventTarget *event_target;
1589     nsIDOMNodeList *node_list;
1590     nsIDOMNode *script_node;
1591     nsAString selector_str;
1592     IDispatch *event_disp;
1593     UINT32 length, i;
1594     WCHAR *event;
1595     nsresult nsres;
1596     HRESULT hres;
1597
1598     TRACE("%p\n", doc);
1599
1600     if(!doc->nsdoc)
1601         return;
1602
1603     nsAString_InitDepend(&selector_str, L"script[event]");
1604     nsres = nsIDOMHTMLDocument_QuerySelectorAll(doc->nsdoc, &selector_str, &node_list);
1605     nsAString_Finish(&selector_str);
1606     if(NS_FAILED(nsres)) {
1607         ERR("QuerySelectorAll failed: %08x\n", nsres);
1608         return;
1609     }
1610
1611     if(!node_list)
1612         return;
1613
1614     nsres = nsIDOMNodeList_GetLength(node_list, &length);
1615     assert(nsres == NS_OK);
1616
1617     for(i=0; i < length; i++) {
1618         nsres = nsIDOMNodeList_Item(node_list, i, &script_node);
1619         if(NS_FAILED(nsres) || !script_node) {
1620             ERR("Item(%d) failed: %08x\n", i, nsres);
1621             continue;
1622         }
1623
1624         nsres = nsIDOMNode_QueryInterface(script_node, &IID_nsIDOMHTMLScriptElement, (void**)&nsscript);
1625         assert(nsres == NS_OK);
1626         nsIDOMNode_Release(script_node);
1627
1628         hres = script_elem_from_nsscript(nsscript, &script_elem);
1629         if(FAILED(hres))
1630             continue;
1631
1632         event_disp = parse_event_elem(doc, script_elem, &event);
1633         if(event_disp) {
1634             event_target = find_event_target(doc, script_elem);
1635             if(event_target) {
1636                 hres = IDispatchEx_QueryInterface(&event_target->dispex.IDispatchEx_iface, &IID_HTMLPluginContainer,
1637                         (void**)&plugin_container);
1638                 if(SUCCEEDED(hres))
1639                     bind_activex_event(doc, plugin_container, event, event_disp);
1640                 else
1641                     bind_target_event(doc, event_target, event, event_disp);
1642
1643                 IDispatchEx_Release(&event_target->dispex.IDispatchEx_iface);
1644                 if(plugin_container)
1645                     node_release(&plugin_container->element.node);
1646             }
1647
1648             heap_free(event);
1649             IDispatch_Release(event_disp);
1650         }
1651
1652         IHTMLScriptElement_Release(&script_elem->IHTMLScriptElement_iface);
1653     }
1654
1655     nsIDOMNodeList_Release(node_list);
1656 }
1657
1658 BOOL find_global_prop(HTMLInnerWindow *window, BSTR name, DWORD flags, ScriptHost **ret_host, DISPID *ret_id)
1659 {
1660     IDispatchEx *dispex;
1661     IDispatch *disp;
1662     ScriptHost *iter;
1663     HRESULT hres;
1664
1665     LIST_FOR_EACH_ENTRY(iter, &window->script_hosts, ScriptHost, entry) {
1666         disp = get_script_disp(iter);
1667         if(!disp)
1668             continue;
1669
1670         hres = IDispatch_QueryInterface(disp, &IID_IDispatchEx, (void**)&dispex);
1671         if(SUCCEEDED(hres)) {
1672             hres = IDispatchEx_GetDispID(dispex, name, flags & (~fdexNameEnsure), ret_id);
1673             IDispatchEx_Release(dispex);
1674         }else {
1675             FIXME("No IDispatchEx\n");
1676             hres = E_NOTIMPL;
1677         }
1678
1679         IDispatch_Release(disp);
1680         if(SUCCEEDED(hres)) {
1681             *ret_host = iter;
1682             return TRUE;
1683         }
1684     }
1685
1686     return FALSE;
1687 }
1688
1689 static BOOL is_jscript_available(void)
1690 {
1691     static BOOL available, checked;
1692
1693     if(!checked) {
1694         IUnknown *unk;
1695         HRESULT hres = CoGetClassObject(&CLSID_JScript, CLSCTX_INPROC_SERVER, NULL, &IID_IUnknown, (void**)&unk);
1696
1697         if(SUCCEEDED(hres)) {
1698             available = TRUE;
1699             IUnknown_Release(unk);
1700         }else {
1701             available = FALSE;
1702         }
1703         checked = TRUE;
1704     }
1705
1706     return available;
1707 }
1708
1709 static BOOL use_gecko_script(IUri *uri)
1710 {
1711     BSTR display_uri;
1712     DWORD zone;
1713     HRESULT hres;
1714
1715     hres = IUri_GetDisplayUri(uri, &display_uri);
1716     if(FAILED(hres))
1717         return FALSE;
1718
1719     hres = IInternetSecurityManager_MapUrlToZone(get_security_manager(), display_uri, &zone, 0);
1720     SysFreeString(display_uri);
1721     if(FAILED(hres)) {
1722         WARN("Could not map %s to zone: %08x\n", debugstr_w(display_uri), hres);
1723         return TRUE;
1724     }
1725
1726     TRACE("zone %d\n", zone);
1727     return zone == URLZONE_UNTRUSTED;
1728 }
1729
1730 void update_browser_script_mode(GeckoBrowser *browser, IUri *uri)
1731 {
1732     nsIWebBrowserSetup *setup;
1733     nsresult nsres;
1734
1735     if(!is_jscript_available()) {
1736         TRACE("jscript.dll not available\n");
1737         browser->script_mode = SCRIPTMODE_GECKO;
1738         return;
1739     }
1740
1741     browser->script_mode = use_gecko_script(uri) ? SCRIPTMODE_GECKO : SCRIPTMODE_ACTIVESCRIPT;
1742
1743     nsres = nsIWebBrowser_QueryInterface(browser->webbrowser, &IID_nsIWebBrowserSetup, (void**)&setup);
1744     if(NS_SUCCEEDED(nsres)) {
1745         nsres = nsIWebBrowserSetup_SetProperty(setup, SETUP_ALLOW_JAVASCRIPT,
1746                 browser->script_mode == SCRIPTMODE_GECKO);
1747
1748         if(NS_SUCCEEDED(nsres))
1749             nsres = nsIWebBrowserSetup_SetProperty(setup, SETUP_DISABLE_NOSCRIPT, TRUE);
1750
1751         nsIWebBrowserSetup_Release(setup);
1752     }
1753
1754     if(NS_FAILED(nsres))
1755         ERR("JavaScript setup failed: %08x\n", nsres);
1756 }
1757
1758 void release_script_hosts(HTMLInnerWindow *window)
1759 {
1760     script_queue_entry_t *queue_iter;
1761     ScriptHost *iter;
1762
1763     while(!list_empty(&window->script_queue)) {
1764         queue_iter = LIST_ENTRY(list_head(&window->script_queue), script_queue_entry_t, entry);
1765
1766         list_remove(&queue_iter->entry);
1767         IHTMLScriptElement_Release(&queue_iter->script->IHTMLScriptElement_iface);
1768         heap_free(queue_iter);
1769     }
1770
1771     while(!list_empty(&window->script_hosts)) {
1772         iter = LIST_ENTRY(list_head(&window->script_hosts), ScriptHost, entry);
1773
1774         release_script_engine(iter);
1775         list_remove(&iter->entry);
1776         iter->window = NULL;
1777         IActiveScriptSite_Release(&iter->IActiveScriptSite_iface);
1778     }
1779 }