Bug 57212

Summary:

script-src should block inline event handlers

Product:

WebKit

Reporter:

Adam Barth <abarth>

Component:

New Bugs

Assignee:

Adam Barth <abarth>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

abarth, eric, webkit.review.bot

Priority:

Version:

528+ (Nightly build)

Hardware:

Other

OS:

OS X 10.5

Bug Depends on:

Bug Blocks:

Attachments:

Description	Flags
Patch	none

Description Adam Barth 2011-03-28 01:12:57 PDT

script-src should block inline event handlers

Comment 1 Adam Barth 2011-03-28 01:16:44 PDT

Created attachment 87111 [details]
Patch

Comment 2 Eric Seidel (no email) 2011-03-28 02:11:55 PDT

Comment on attachment 87111 [details]
Patch

Seems reasonable.

Comment 3 Adam Barth 2011-03-28 13:16:28 PDT

Comment on attachment 87111 [details]
Patch

Clearing flags on attachment: 87111

Committed r82147: <http://trac.webkit.org/changeset/82147>

Comment 4 Adam Barth 2011-03-28 13:16:32 PDT

All reviewed patches have been landed.  Closing bug.

Comment 5 WebKit Review Bot 2011-03-28 13:38:41 PDT

http://trac.webkit.org/changeset/82147 might have broken SnowLeopard Intel Release (Build)