[Webkit-unassigned] [Bug 27895] [XSSAuditor] Inline Event Handler with single-line JavaScript comment can bypass XSSAuditor
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Aug 5 17:40:16 PDT 2009
https://bugs.webkit.org/show_bug.cgi?id=27895
--- Comment #6 from Daniel Bates <dbates at webkit.org> 2009-08-05 17:40:15 PDT ---
Oh, forgot to mention. An alternative implementation of Patch 1, to get rid of
the static_cast Adam brought up, is to add the method rawAttributeBeforeValue()
directly to the MappedAttribute class.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list