Bug 178375

Summary: Strip away event handlers and JavaScript URLs when copying
Product: WebKit Reporter: Ryosuke Niwa <rniwa>
Component: HTML EditingAssignee: Ryosuke Niwa <rniwa>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, cdumez, commit-queue, webkit-bug-importer, wenson_hsieh
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Fixes the bug
none
Patch for landing
none
Patch for landing none

Description Ryosuke Niwa 2017-10-16 20:48:31 PDT 
We should strip away event handlers and JavaScript URLs when copying.
Comment 1 Ryosuke Niwa 2017-10-16 20:50:01 PDT 
Created attachment 323985 [details]
Fixes the bug
Comment 2 Wenson Hsieh 2017-10-16 21:02:04 PDT 
Comment on attachment 323985 [details]
Fixes the bug

r=mews
Comment 3 Ryosuke Niwa 2017-10-16 21:08:15 PDT 
Created attachment 323987 [details]
Patch for landing
Comment 4 Ryosuke Niwa 2017-10-16 21:08:43 PDT 
Comment on attachment 323987 [details]
Patch for landing

Wait for EWS to sanity check.
Comment 5 Ryosuke Niwa 2017-10-16 21:17:33 PDT 
Created attachment 323988 [details]
Patch for landing
Comment 6 WebKit Commit Bot 2017-10-16 23:25:59 PDT 
Comment on attachment 323988 [details]
Patch for landing

Clearing flags on attachment: 323988

Committed r223462: <https://trac.webkit.org/changeset/223462>
Comment 7 WebKit Commit Bot 2017-10-16 23:26:01 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 8 Radar WebKit Bug Importer 2017-10-16 23:26:52 PDT 
<rdar://problem/35023600>