[Webkit-unassigned] [Bug 55233] XSL transformations do not handle errors

Thu May 26 09:59:05 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=55233

Adam Barth <abarth at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #94877|review?                     |review-
               Flag|                            |

--- Comment #6 from Adam Barth <abarth at webkit.org>  2011-05-26 09:59:05 PST ---
(From update of attachment 94877)
View in context: https://bugs.webkit.org/attachment.cgi?id=94877&action=review

This looks pretty cool, but we'll need some tests!  (I didn't review deeply.)

> Source/WebCore/xml/XMLErrors.cpp:68
> +            m_errorMessages += "warning in " + sourceURL + " on line" + String::number(position.m_line.oneBasedInt()) + " at column " + String::number(position.m_column.oneBasedInt()) + ": " + m;

Is there an XSS risk here?  Should we sandbox error pages to be extra-sure?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.