213
edits
Firefox3.1/Security/ViewSource: Difference between revisions
Jump to navigation
Jump to search
Firefox3.1/Security/ViewSource (view source)
Revision as of 01:08, 4 December 2008
, 4 December 2008→Review comments
| Line 140: | Line 140: | ||
== Review comments == | == Review comments == | ||
* need to whitelist scheme? either a short static list, or at least checkLoadURI? | * need to whitelist scheme? either a short static list, or at least checkLoadURI? | ||
Bug [http://bugzilla.mozilla.org/show_bug.cgi?id=467852 467852] - View Source Linkification should only linkify "safe" URLs. | **Bug [http://bugzilla.mozilla.org/show_bug.cgi?id=467852 467852] - View Source Linkification should only linkify "safe" URLs. | ||
* javascript: in particular would be bad (but seems to be blocked?) | * javascript: in particular would be bad (but seems to be blocked?) | ||
* what's the principal used for data: urls? | * what's the principal used for data: urls? | ||