[Webkit-unassigned] [Bug 47397] TextResourceDecoder::checkForHeadCharset can look way past the limit.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Oct 8 16:34:43 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=47397





--- Comment #13 from Dmitry Titov <dimich at chromium.org>  2010-10-08 16:34:42 PST ---
(In reply to comment #12)
> I see. We only ignore tags in <script> for the purpose of ending <head> section - for example, <script>"<body>"</script> won't make inHeadSection false.

Curiously, even this detects the charset (incorrectly):
<script>foo='<meta charset=koi8-r>'</script><script>alert(document.charset)</script>

+1 for HTMLTokenizer :-)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list