Bug 83238

Summary: XSSAuditor doesn't catch injected srcdoc attributes
Product: WebKit Reporter: Adam Barth <abarth>
Component: New BugsAssignee: Adam Barth <abarth>
Status: RESOLVED FIXED    
Severity: Normal CC: dbates, eric, tsepez, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Adam Barth
Reported 2012-04-04 18:08:02 PDT
XSSAuditor doesn't catch injected srcdoc attributes
Attachments
Patch (9.03 KB, patch)
2012-04-04 18:10 PDT, Adam Barth 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Adam Barth
Comment 1 2012-04-04 18:10:28 PDT
Created attachment 135734 [details] Patch
Daniel Bates
Comment 2 2012-04-04 20:42:25 PDT
Comment on attachment 135734 [details] Patch Looks good to me.
WebKit Review Bot
Comment 3 2012-04-04 21:18:44 PDT
Comment on attachment 135734 [details] Patch Clearing flags on attachment: 135734 Committed r113286: <http://trac.webkit.org/changeset/113286>
WebKit Review Bot
Comment 4 2012-04-04 21:18:49 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.