[Webkit-unassigned] [Bug 78700] SVG TRef/Use NULL ptr

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=78700





--- Comment #3 from Nikolas Zimmermann <zimmermann at kde.org>  2012-02-15 15:22:16 PST ---
(In reply to comment #2)
> FWIW my patch for http://www.webkit.org/b/74858 also fixes this particular crash (as the event listeners are moved onto the target instead of its parent). Sounds like we still need to add target validation though.

Just looked at this again, Rob did it just correct according to SVG 1.1 2nd edition: "xlink:href of <tref>: An IRI reference to an element whose character data content shall be used as character data for this ‘tref’ element." There's no white or black-listing desired, any element should work.

So probably this is just a dup of your bug.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.