[Webkit-unassigned] [Bug 27239] Do not do HTTP Refresh to javascript: or other dangerous URI schemes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=27239





--- Comment #3 from Darin Adler <darin at apple.com>  2009-07-14 11:56:56 PDT ---
(From update of attachment 32686)
If we think there will be other places where "HTTP family plus FTP" is the set
we'll care about, then we may want a new function to do this.

A protocolIs function already exists that works on a string without creating
and parsing a KURL, so there's no need to make a KURL in the new code. But we
would need a version of protocolInHTTPFamily that worked on a plain string.

The change log lists the file changed, but not the function name. It should
list the function name.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.