[Webkit-unassigned] [Bug 30242] [XSSAuditor] IFrame JavaScript URLs that are URL-encoded twice can by bypass the XSSAuditor

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Oct 11 16:25:22 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=30242


Daniel Bates <dbates at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends on|30241                       |




--- Comment #2 from Daniel Bates <dbates at webkit.org>  2009-10-11 16:25:22 PDT ---
Removing dependency on bug #30241 as it may not be obvious or possible come up
with a inverse routine to KURL::parse. Moreover, we can normalize the outgoing
HTTP parameters by URL-decoding them twice.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list