Security/Reviews/Gaia/costcontrol: Difference between revisions

Security/Reviews/Gaia/costcontrol (view source)

152 bytes removed , 25 September 2013

Confirmed users

353

edits

@@ Line 76: / Line 76: @@
       ~/work/code/B2G/gaia/apps/costcontrol/js/view_manager.js:138 - var script = document.createElement('script');
-          - Used to activate scripts
+          - finds all defined script tags and redfines them, then appends to page
-         - grabs a bunch of scripts (from where?) and then builds script tags with the sources.
-             - can we contaminate the name of a script file defined in the src to something maliciou
 ====2. Secure Communications ====