WebKit Bugzilla
Attachment 358355 Details for
Bug 193155
: Parsed protocol of javascript URLs with embedded newlines and carriage returns do not match parsed protocol in Chrome and Firefox
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
Test
test.html (text/html), 119 bytes, created by
Daniel Bates
on 2019-01-04 13:19:51 PST
(
hide
)
Description:
Test
Filename:
MIME Type:
Creator:
Daniel Bates
Created:
2019-01-04 13:19:51 PST
Size:
119 bytes
patch
obsolete
><script> >var link = document.createElement("a"); >link.href="javascript://:%0aalert(2)"; >alert(link.protocol); ></script>
<script> var link = document.createElement("a"); link.href="javascript://:%0aalert(2)"; alert(link.protocol); </script>
View Attachment As Raw
Actions:
View
Attachments on
bug 193155
: 358355 |
358371
|
358376