HomePhabricator

Transactions T77624 Change Details

Change Details

Old
New
Diff

I was re-reviewing some parser functions, and found that the Listing extension allows arbitrary urls, including "javascript:", etc. E.g., <buy name="asdf" url="javascript:alert(1)" >anything</buy>

I was re-reviewing some parser functions, and found that the Listing extension allows arbitrary urls, including "javascript:", etc. E.g., <buy name="asdf" url="javascript:alert(1)" >anything</buy>

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL