clipperz/password-manager-mirror
1
0
Fork 0
mirror of http://git.whoc.org.uk/git/password-manager.git synced 2025-12-19 21:07:03 +01:00
Code Issues Releases Wiki Activity

Fixed issues reported by cure53.de

Browse Source 
Fixed issues CLP-01-014 and CLP-01-015
This commit is contained in:
Giulio Cesare Solaroli
2014-05-02 17:14:18 +02:00
parent 03659f6b3d
commit ed6b4edc82
5 changed files with 47 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
frontend/beta/js/Clipperz/Base.js
View File

@@ -246,6 +246,34 @@ MochiKit.Base.update(Clipperz.Base, {
return result;
},
'javascriptInjectionPattern': new RegExp("javascript:\/\/\"", "g"),
'sanitizeUrl': function(aValue) {
var result;
if ((aValue != null) && this.javascriptInjectionPattern.test(aValue)) {
result = aValue.replace(this.javascriptInjectionPattern, '');
console.log("sanitized url", aValue, result);
} else {
result = aValue;
}
return result;
},
'sanitizeFavicon': function(aValue) {
var result;
if ((aValue != null) && this.javascriptInjectionPattern.test(aValue)) {
result = aValue.replace(this.javascriptInjectionPattern, '');
console.log("sanitized favicon", aValue, result);
} else {
result = aValue;
}
return result;
},
//-------------------------------------------------------------------------
'exception': {