Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-12-14 10:43:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix

Browse Source 
23643 Reading email messages using <META REFRESH>
23729 Executing functions in "chrome:" protocol - #3 - META REFRES
23730 Executing functions in "chrome:" protocol - #4 - HTTP redire
24217 Access to functions in chrome: protocol using IFRAME
24865 Parsing local non-HTML files #2 using META REFRESH
r=gagan
This commit is contained in:
norris%netscape.com 2000-01-25 04:42:01 +00:00
parent 71903370cb
commit 8c000f9285
3 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
content/html/document/src/nsHTMLContentSink.cpp
View File

@ -3663,7 +3663,7 @@ HTMLContentSink::ProcessMETATag(const nsIParserNode& aNode)
// go past the '=' sign
loc = result.Find("=", PR_TRUE, loc);
if (loc > -1) {
loc++; // leading/trailign spaces get trimmed in url creating code.
loc++; // leading/trailing spaces get trimmed in url creating code.
result.Mid(uriAttribStr, loc, result.Length() - loc);
uriCStr = uriAttribStr.GetUnicode();
}
@ -3671,6 +3671,12 @@ HTMLContentSink::ProcessMETATag(const nsIParserNode& aNode)
nsIURI *uri = nsnull;
rv = NS_NewURI(&uri, uriCStr, baseURI);
if (loc > -1 && NS_SUCCEEDED(rv)) {
NS_WITH_SERVICE(nsIScriptSecurityManager, securityManager,
NS_SCRIPTSECURITYMANAGER_PROGID, &rv);
if (NS_SUCCEEDED(rv))
rv = securityManager->CheckLoadURI(baseURI, uri);
}
NS_RELEASE(baseURI);
if (NS_FAILED(rv)) return rv;

8
layout/html/document/src/nsHTMLContentSink.cpp
View File

@ -3663,7 +3663,7 @@ HTMLContentSink::ProcessMETATag(const nsIParserNode& aNode)
// go past the '=' sign
loc = result.Find("=", PR_TRUE, loc);
if (loc > -1) {
loc++; // leading/trailign spaces get trimmed in url creating code.
loc++; // leading/trailing spaces get trimmed in url creating code.
result.Mid(uriAttribStr, loc, result.Length() - loc);
uriCStr = uriAttribStr.GetUnicode();
}
@ -3671,6 +3671,12 @@ HTMLContentSink::ProcessMETATag(const nsIParserNode& aNode)
nsIURI *uri = nsnull;
rv = NS_NewURI(&uri, uriCStr, baseURI);
if (loc > -1 && NS_SUCCEEDED(rv)) {
NS_WITH_SERVICE(nsIScriptSecurityManager, securityManager,
NS_SCRIPTSECURITYMANAGER_PROGID, &rv);
if (NS_SUCCEEDED(rv))
rv = securityManager->CheckLoadURI(baseURI, uri);
}
NS_RELEASE(baseURI);
if (NS_FAILED(rv)) return rv;

7
netwerk/protocol/http/src/nsHTTPChannel.cpp
View File

@ -49,6 +49,7 @@
#include "nsAuthEngine.h"
#include "nsINetDataCacheManager.h"
#include "nsINetDataCache.h"
#include "nsIScriptSecurityManager.h"
#ifdef DEBUG_gagan
#include "nsUnixColorPrintf.h"
@ -1255,6 +1256,12 @@ nsresult nsHTTPChannel::Redirect(const char *aNewLocation,
nsAllocator::Free(newURLSpec);
#endif /* PR_LOGGING */
NS_WITH_SERVICE(nsIScriptSecurityManager, securityManager,
NS_SCRIPTSECURITYMANAGER_PROGID, &rv);
if (NS_FAILED(rv)) return rv;
rv = securityManager->CheckLoadURI(mOriginalURI, newURI);
if (NS_FAILED(rv)) return rv;
rv = serv->NewChannelFromURI(mVerb.GetBuffer(), newURI, mLoadGroup, mCallbacks,
mLoadAttributes, mOriginalURI,
mBufferSegmentSize, mBufferMaxSize, getter_AddRefs(channel));