[Webkit-unassigned] [Bug 47397] TextResourceDecoder::checkForHeadCharset can look way past the limit.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Oct 8 16:34:43 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=47397
--- Comment #13 from Dmitry Titov <dimich at chromium.org> 2010-10-08 16:34:42 PST ---
(In reply to comment #12)
> I see. We only ignore tags in <script> for the purpose of ending <head> section - for example, <script>"<body>"</script> won't make inHeadSection false.
Curiously, even this detects the charset (incorrectly):
<script>foo='<meta charset=koi8-r>'</script><script>alert(document.charset)</script>
+1 for HTMLTokenizer :-)
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list