Bug 57212 - script-src should block inline event handlers
Summary: script-src should block inline event handlers
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: Other OS X 10.5
: P2 Normal
Assignee: Adam Barth
URL:
Keywords:
Depends on:
Blocks: 53572
  Show dependency treegraph
 
Reported: 2011-03-28 01:12 PDT by Adam Barth
Modified: 2011-03-28 13:38 PDT (History)
3 users (show)

See Also:


Attachments
Patch (8.61 KB, patch)
2011-03-28 01:16 PDT, Adam Barth
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Adam Barth 2011-03-28 01:12:57 PDT
script-src should block inline event handlers
Comment 1 Adam Barth 2011-03-28 01:16:44 PDT
Created attachment 87111 [details]
Patch
Comment 2 Eric Seidel (no email) 2011-03-28 02:11:55 PDT
Comment on attachment 87111 [details]
Patch

Seems reasonable.
Comment 3 Adam Barth 2011-03-28 13:16:28 PDT
Comment on attachment 87111 [details]
Patch

Clearing flags on attachment: 87111

Committed r82147: <http://trac.webkit.org/changeset/82147>
Comment 4 Adam Barth 2011-03-28 13:16:32 PDT
All reviewed patches have been landed.  Closing bug.
Comment 5 WebKit Review Bot 2011-03-28 13:38:41 PDT
http://trac.webkit.org/changeset/82147 might have broken SnowLeopard Intel Release (Build)