Security/Reviews/Gaia/costcontrol: Difference between revisions

Line 70: Line 70:
=====Suspicious but OK=====
=====Suspicious but OK=====
     ~/work/code/gaia/apps/costcontrol/js/view_manager.js:111 - panel.innerHTML = panel.childNodes[i].nodeValue;
     ~/work/code/gaia/apps/costcontrol/js/view_manager.js:111 - panel.innerHTML = panel.childNodes[i].nodeValue;
         -grabbing static HTML defined in a comment block inside index.html
         - grabbing static HTML defined in a comment block inside index.html


     ~/work/code/gaia/apps/costcontrol/js/settings/settings.js:131 - src.innerHTML = xhr.responseText;
     ~/work/code/gaia/apps/costcontrol/js/settings/settings.js:131 - src.innerHTML = xhr.responseText;
         -> XHR is fetching /debug.html which has no variable data
         - XHR is fetching /debug.html which has no variable data


     ~/work/code/B2G/gaia/apps/costcontrol/js/view_manager.js:138 - var script = document.createElement('script');
     ~/work/code/B2G/gaia/apps/costcontrol/js/view_manager.js:138 - var script = document.createElement('script');
Confirmed users
353

edits