[Webkit-unassigned] [Bug 30242] [XSSAuditor] IFrame JavaScript URLs that are URL-encoded twice can by bypass the XSSAuditor
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sun Oct 11 16:25:22 PDT 2009
https://bugs.webkit.org/show_bug.cgi?id=30242
Daniel Bates <dbates at webkit.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends on|30241 |
--- Comment #2 from Daniel Bates <dbates at webkit.org> 2009-10-11 16:25:22 PDT ---
Removing dependency on bug #30241 as it may not be obvious or possible come up
with a inverse routine to KURL::parse. Moreover, we can normalize the outgoing
HTTP parameters by URL-decoding them twice.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list