gecko-dev/content
mozilla.BenB%bucksch.org f5ccf4d5f1 - Bug 243040: Re-escape attribute values which Gecko unescaped for us. Not doing this allowed to insert arbitary unchecked HTML into the result.
- JS quotes in attribute values are now probably possible (but JS still usually disabled by allowed attribute prefs and javascript: URL blocker)
- removed base64 blocker which is probably pointless
- comment and debug changes
- little code style cleanup
r=akk, sr=jst
2004-06-05 22:47:40 +00:00
..
base - Bug 243040: Re-escape attribute values which Gecko unescaped for us. Not doing this allowed to insert arbitary unchecked HTML into the result. 2004-06-05 22:47:40 +00:00
events Change FlushPendingNotifications to have more granularity and update callers to 2004-05-27 22:08:42 +00:00
html bug 243966 getPropertyValue truncates values for computed system font value 2004-06-03 21:19:08 +00:00
shared Bug 237535 prelight text invisible in high-contrast inverse themes 2004-06-01 01:58:10 +00:00
svg Change FlushPendingNotifications to have more granularity and update callers to 2004-05-27 22:08:42 +00:00
xbl Change FlushPendingNotifications to have more granularity and update callers to 2004-05-27 22:08:42 +00:00
xml Change FlushPendingNotifications to have more granularity and update callers to 2004-05-27 22:08:42 +00:00
xsl Add a version of CheckLoadURI that takes a source principal instead of a source 2004-04-25 16:55:27 +00:00
xslt/src
xul Change FlushPendingNotifications to have more granularity and update callers to 2004-05-27 22:08:42 +00:00
.cvsignore
Makefile.in Bug 236613: change to MPL/LGPL/GPL tri-license. 2004-04-17 21:52:36 +00:00