[Webkit-unassigned] [Bug 27895] [XSSAuditor] Inline Event Handler with single-line JavaScript comment can bypass XSSAuditor

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Oct 8 22:32:57 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27895


Daniel Bates <dbates at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #40683|0                           |1
        is obsolete|                            |




--- Comment #19 from Daniel Bates <dbates at webkit.org>  2009-10-08 22:32:57 PDT ---
Created an attachment (id=40929)
 --> (https://bugs.webkit.org/attachment.cgi?id=40929)
Patch with test cases

Updated patch and modified test cases to pass all XSSAuditor tests.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list