[Webkit-unassigned] [Bug 27895] [XSSAuditor] Inline Event Handler with single-line JavaScript comment can bypass XSSAuditor

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 5 13:19:53 PDT 2009


--- Comment #4 from Daniel Bates <dbates at webkit.org>  2009-08-05 13:19:52 PDT ---
Created an attachment (id=34166)
 --> (https://bugs.webkit.org/attachment.cgi?id=34166)
Alternative patch - as per Adam's suggestion

An alternative patch for this issue as suggested by Adam. Includes Base href

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list