dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bf5f708) | patch
SECURITY: Fix animate blacklist
authorcsteipp <csteipp@wikimedia.org>
Wed, 14 Jan 2015 00:48:01 +0000 (16:48 -0800)
committercsteipp <csteipp@wikimedia.org>
Wed, 1 Apr 2015 16:55:22 +0000 (09:55 -0700)
commitb5f491fb6d5d2a0d808223c898ba99b98637fa71
tree082e5803070da36e763d2b5a73e2a620ac1c0867tree | snapshot
parentbf5f708dc52503a2981cd8f059708f0f773b218dcommit | diff
SECURITY: Fix animate blacklist

The blacklist should prevent animating any element's xlink:href to a
javascript url.

Bug: T86711
Change-Id: Ia9e9192165fdfe1701f22605eee0b0e5c9137d5a
includes/upload/UploadBase.php diff | blob | history
tests/phpunit/includes/upload/UploadBaseTest.php diff | blob | history
Wiklou, le Wiki du Wiklou