[WebKit-devel] [Bug 217464] Universal XSS

[Andrea Diamantini]

https://bugs.kde.org/show_bug.cgi?id=217464





--- Comment #14 from Andrea Diamantini <adjam7 gmail com>  2010-08-02 00:53:52 ---
commit 1fd48c700abb6d7ff56fded1e39a1418cc573216
Author: Andrea Diamantini <adjam7 at gmail.com>
Date:   Sat Jul 31 01:08:41 2010 +0200

    Applying Eelko's patch against XSS vulnerability

    Are we yet vulnerable?

    CCBUG:217464

diff --git a/src/webpage.cpp b/src/webpage.cpp
index a63940b..ea2add6 100644
--- a/src/webpage.cpp
+++ b/src/webpage.cpp
@@ -577,8 +577,8 @@ QString WebPage::errorPage(QNetworkReply *reply)
         return QString("Couldn't open the rekonqinfo.html file");
     }

-    QString title = i18n("Error loading: %1", reply->url().toString());
-    QString urlString = reply->url().toString(QUrl::RemoveUserInfo |
QUrl::RemoveQuery);
+    QString title = i18n("There was a problem while loading the page");
+    QString urlString = reply->url().toString(QUrl::RemoveUserInfo |
QUrl::RemoveQuery | QUrl::RemovePath);

     QString iconPath = QString("file://") +
KIconLoader::global()->iconPath("dialog-warning" , KIconLoader::Small);
     iconPath.replace(QL1S("16"), QL1S("128"));

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.