SECURITY: Disallow -o-link in styles
authorcsteipp <csteipp@wikimedia.org>
Tue, 14 Jan 2014 06:12:28 +0000 (22:12 -0800)
committercsteipp <csteipp@wikimedia.org>
Tue, 14 Jan 2014 06:12:28 +0000 (22:12 -0800)
commit93891d1b5d089c3c1157085165af0f50307b0b63
tree7052c3bdf391f77cff0a16b05df1ae009e295246
parentf8c9f876ef3d1271abb509fc548a0ef2ea24298f
SECURITY: Disallow -o-link in styles

Opera will execute javascript from -o-link css attributes.

Bug: 58472
Change-Id: I3b640282ca1feeb175b095e9fdc4dc3ceff05e0f
includes/Sanitizer.php
tests/parser/parserTests.txt