53643 2011-02-02 16:52:46 -0800 When XSSFilter blocks JavaScript URLs, use a safe JavaScript URL instead of the empty string 2011-02-02 20:23:24 -0800 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Other OS X 10.5 RESOLVED FIXED P2 Normal --- 49845 1 abarth abarth commit-queue dbates eric oldest_to_newest 344413 0 abarth 2011-02-02 16:52:46 -0800 When XSSFilter blocks JavaScript URLs, use a safe JavaScript URL instead of the empty string 344418 1 81006 abarth 2011-02-02 16:53:57 -0800 Created attachment 81006 Patch 344504 2 81006 commit-queue 2011-02-02 20:23:19 -0800 Comment on attachment 81006 Patch Clearing flags on attachment: 81006 Committed r77462: <http://trac.webkit.org/changeset/77462> 344505 3 commit-queue 2011-02-02 20:23:24 -0800 All reviewed patches have been landed. Closing bug. 81006 2011-02-02 16:53:57 -0800 2011-02-02 20:23:19 -0800 Patch bug-53643-20110202165356.patch text/plain 2443 abarth ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZwppbmRleCA1NzM5MGI3YWRhNjUyM2QzN2NiZGU5NTlmM2U0MzJlNWQ1YjgzMTIwLi4w MTVmYTFmNTE3NTliNDM0NGZkYmJmMzVmYmJjYTYyYmFmN2FhYjU5IDEwMDY0NAotLS0gYS9Tb3Vy Y2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0y LDYgKzIsMjQgQEAKIAogICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KIAorICAg ICAgICBXaGVuIFhTU0ZpbHRlciBibG9ja3MgSmF2YVNjcmlwdCBVUkxzLCB1c2UgYSBzYWZlIEph dmFTY3JpcHQgVVJMCisgICAgICAgIGluc3RlYWQgb2YgdGhlIGVtcHR5IHN0cmluZworICAgICAg ICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NTM2NDMKKworICAgICAg ICBJbiBhIFVSTCBjb250ZXh0LCB0aGUgZW1wdHkgc3RyaW5nIGNvbXBsZXRlcyB0byB0aGUgVVJM IG9mIHRoZSBjdXJyZW50CisgICAgICAgIHBhZ2UsIHdoaWNoIGNhdXNlcyB0aGVzZSB0ZXN0cyB0 byBnbyBpbnRvIGFuIGluZmluaXRlIGxvb3AuICBJbnN0ZWFkLAorICAgICAgICB3ZSBzaG91bGQg dXNlIGEgInNhZmUiIEphdmFTY3JpcHQgVVJMIHRoYXQgZG9lcyBub3RoaW5nLgorCisgICAgICAg IEZpeGVzOgorICAgICAgICAgICAgaHR0cC90ZXN0cy9zZWN1cml0eS94c3NBdWRpdG9yL2phdmFz Y3JpcHQtbGluayoKKworICAgICAgICAqIGh0bWwvcGFyc2VyL1hTU0ZpbHRlci5jcHA6CisgICAg ICAgIChXZWJDb3JlOjpYU1NGaWx0ZXI6OmVyYXNlRGFuZ2Vyb3VzQXR0cmlidXRlc0lmSW5qZWN0 ZWQpOgorCisyMDExLTAyLTAyICBBZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CisKKyAg ICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKICAgICAgICAgVGVhY2ggWFNTRmls dGVyIGFib3V0IFgtWFNTLVByb3RlY3Rpb24KICAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v cmcvc2hvd19idWcuY2dpP2lkPTUzNjQwCiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2h0 bWwvcGFyc2VyL1hTU0ZpbHRlci5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9YU1NG aWx0ZXIuY3BwCmluZGV4IDRmZTAwNjUwMmRjOTRkMGJiNjE3ZGU5MjYzYzM0YzY4MDcwMThmNDIu LjM1YTU4MWVlOTY4NmZhMWNhNGFkM2NlMjE5NjMxZDA5YWYyMjI4ZWMgMTAwNjQ0Ci0tLSBhL1Nv dXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL1hTU0ZpbHRlci5jcHAKKysrIGIvU291cmNlL1dlYkNv cmUvaHRtbC9wYXJzZXIvWFNTRmlsdGVyLmNwcApAQCAtMzIwLDE0ICszMjAsMjAgQEAgYm9vbCBY U1NGaWx0ZXI6OmZpbHRlckJhc2VUb2tlbihIVE1MVG9rZW4mIHRva2VuKQogCiBib29sIFhTU0Zp bHRlcjo6ZXJhc2VEYW5nZXJvdXNBdHRyaWJ1dGVzSWZJbmplY3RlZChIVE1MVG9rZW4mIHRva2Vu KQogeworICAgIERFRklORV9TVEFUSUNfTE9DQUwoU3RyaW5nLCBzYWZlSmF2YVNjcmlwdFVSTCwg KCJqYXZhc2NyaXB0OnZvaWQoMCkiKSk7CisKICAgICBib29sIGRpZEJsb2NrU2NyaXB0ID0gZmFs c2U7CiAgICAgZm9yIChzaXplX3QgaSA9IDA7IGkgPCB0b2tlbi5hdHRyaWJ1dGVzKCkuc2l6ZSgp OyArK2kpIHsKICAgICAgICAgY29uc3QgSFRNTFRva2VuOjpBdHRyaWJ1dGUmIGF0dHJpYnV0ZSA9 IHRva2VuLmF0dHJpYnV0ZXMoKS5hdChpKTsKLSAgICAgICAgaWYgKCFpc05hbWVPZklubGluZUV2 ZW50SGFuZGxlcihhdHRyaWJ1dGUubV9uYW1lKSAmJiAhY29udGFpbnNKYXZhU2NyaXB0VVJMKGF0 dHJpYnV0ZS5tX3ZhbHVlKSkKKyAgICAgICAgYm9vbCBpc0lubGluZUV2ZW50SGFuZGxlciA9IGlz TmFtZU9mSW5saW5lRXZlbnRIYW5kbGVyKGF0dHJpYnV0ZS5tX25hbWUpOworICAgICAgICBib29s IHZhbHVlQ29udGFpbnNKYXZhU2NyaXB0VVJMID0gaXNJbmxpbmVFdmVudEhhbmRsZXIgPyBmYWxz ZSA6IGNvbnRhaW5zSmF2YVNjcmlwdFVSTChhdHRyaWJ1dGUubV92YWx1ZSk7CisgICAgICAgIGlm ICghaXNJbmxpbmVFdmVudEhhbmRsZXIgJiYgIXZhbHVlQ29udGFpbnNKYXZhU2NyaXB0VVJMKQog ICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgIGlmICghaXNDb250YWluZWRJblJlcXVlc3Qo c25pcHBldEZvckF0dHJpYnV0ZSh0b2tlbiwgYXR0cmlidXRlKSkpCiAgICAgICAgICAgICBjb250 aW51ZTsKICAgICAgICAgdG9rZW4uZXJhc2VWYWx1ZU9mQXR0cmlidXRlKGkpOworICAgICAgICBp ZiAodmFsdWVDb250YWluc0phdmFTY3JpcHRVUkwpCisgICAgICAgICAgICB0b2tlbi5hcHBlbmRU b0F0dHJpYnV0ZVZhbHVlKGksIHNhZmVKYXZhU2NyaXB0VVJMKTsKICAgICAgICAgZGlkQmxvY2tT Y3JpcHQgPSB0cnVlOwogICAgIH0KICAgICByZXR1cm4gZGlkQmxvY2tTY3JpcHQ7Cg==