Bug 53652 - Teach XSSFilter that <param> elements can contain URLs
Summary: Teach XSSFilter that <param> elements can contain URLs
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: Other OS X 10.5
: P2 Normal
Assignee: Adam Barth
URL:
Keywords:
Depends on:
Blocks: 49845
  Show dependency tree / graph
 
Reported: 2011-02-02 17:42 PST by Adam Barth
Modified: 2011-02-02 21:46 PST (History)
4 users (show)

See Also:

Attachments
Patch (5.87 KB, patch)
2011-02-02 17:45 PST, Adam Barth 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Adam Barth 2011-02-02 17:42:26 PST 
Teach XSSFilter that <param> elements can contain URLs
Comment 1 Adam Barth 2011-02-02 17:45:06 PST 
Created attachment 81013 [details]
Patch
Comment 2 Adam Barth 2011-02-02 17:47:08 PST 
After this patch we pass all the xssAuditor tests!  (Even the handful that the XSSAuditor fails.)
Comment 3 Daniel Bates 2011-02-02 21:08:04 PST 
Comment on attachment 81013 [details]
Patch

LGTM
Comment 4 Daniel Bates 2011-02-02 21:09:22 PST 
(In reply to comment #2)
> After this patch we pass all the xssAuditor tests!  (Even the handful that the XSSAuditor fails.)

Yay! Go Adam go!
Comment 5 WebKit Commit Bot 2011-02-02 21:46:00 PST 
Comment on attachment 81013 [details]
Patch

Clearing flags on attachment: 81013

Committed r77467: <http://trac.webkit.org/changeset/77467>
Comment 6 WebKit Commit Bot 2011-02-02 21:46:04 PST 
All reviewed patches have been landed.  Closing bug.