SECURITY: Enhance CSS filtering in SVG files
authorcsteipp <csteipp@wikimedia.org>
Thu, 4 Sep 2014 23:05:47 +0000 (16:05 -0700)
committermglaser <glaser@hallowelt.biz>
Wed, 24 Sep 2014 19:06:54 +0000 (21:06 +0200)
commit6aa3befeb0f428ff32d4e3db8f66b8154a13e126
treeff0c5fe60a681c3073f0ed26a46b1ca74d3d57b1
parent930dcafb09ab736a493cdeff93032cd7992468de
SECURITY: Enhance CSS filtering in SVG files

* Filter <style> elements
* Normalize style elements and attributes before filtering
* Add checks for attributes that contain css
* Add unit tests for html5sec and reported bugs

Bug:69008
Change-Id: I732eece710f1bfaaeea1e5de541fcd4cfb375de7
includes/Sanitizer.php
includes/libs/XmlTypeCheck.php
includes/upload/UploadBase.php
tests/phpunit/includes/upload/UploadBaseTest.php