125837 – XSSAuditor should catch reflected srcdoc properties even without an <iframe> tag injection

RESOLVED FIXED 125837

XSSAuditor should catch reflected srcdoc properties even without an <iframe> tag injection

https://bugs.webkit.org/show_bug.cgi?id=125837

Summary XSSAuditor should catch reflected srcdoc properties even without an <iframe> ...

Ryosuke Niwa

Reported 2013-12-16 22:27:19 PST

Attachments
Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2013-12-16 22:46:22 PST

Note You need to log in before you can comment on or make changes to this bug.

Status RESOLVED

Resolution FIXED

Priority P2

Severity Normal

Classification Unclassified

Version 528+ (Nightly build)

Hardware Unspecified

OS Unspecified

Product WebKit

Component Page Loading

Assignee

Nobody

Reported

2013-12-16 22:27 PST

Modified

2013-12-16 22:46 PST History

CC List

5 users Show

URL

Keywords BlinkMergeCandidate

Depends on

Blocks