Bug 99942

Summary: A billion laughs in SVG
Product: WebKit Reporter: Philip Rogers <pdr>
Component: SVGAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: bfulgham, webkit-bug-importer, zimmermann
Priority: P2 Keywords: InRadar
Version: 420+   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
LOL none

Philip Rogers
Reported 2012-10-21 12:09:03 PDT
Created attachment 169811 [details] LOL Our SVG implementation is susceptible to the billion laughs DOS attack: http://en.wikipedia.org/wiki/Billion_laughs Should we do anything about this?
Attachments
LOL (2.60 KB, text/html)
2012-10-21 12:09 PDT, Philip Rogers 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2022-07-15 15:40:38 PDT
It looks like Safari, Chrome, and Firefox suffer from this -- but we should do better.
Radar WebKit Bug Importer
Comment 2 2022-07-15 15:40:48 PDT
<rdar://problem/97098084>
Note You need to log in before you can comment on or make changes to this bug.