Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 728892: The attachment "Details" page is still vulnerable to Clickjacking with SVG or XHTML attachments

Browse Source 
r/a=justdave


git-svn-id: svn://10.0.0.236/trunk@265284 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
bzrmirror%bugzilla.org 2014-03-12 19:00:52 +00:00
parent 8c36f79194
commit 2c91703716
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mozilla/webtools/bugzilla/.bzrrev
View File

@ -1 +1 @@
8957
8958

2
mozilla/webtools/bugzilla/.gitrev
View File

@ -1 +1 @@
d51abfd7e3e1fcc3eea37e72ab0f49f3e28950a2
ca7b39aa66be9b4deea1ead8e6a788025759b80d

2
mozilla/webtools/bugzilla/template/en/default/attachment/edit.html.tmpl
View File

@ -197,7 +197,7 @@
readonly = 'readonly'
%]
[% ELSE %]
<iframe id="viewFrame" src="attachment.cgi?id=[% attachment.id %]">
<iframe id="viewFrame" src="attachment.cgi?id=[% attachment.id %]" sandbox>
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
<a href="attachment.cgi?id=[% attachment.id %]">View the attachment on a separate page</a>.</b>
</iframe>

2
mozilla/webtools/bugzilla/template/en/default/attachment/show-multiple.html.tmpl
View File

@ -78,7 +78,7 @@
classes = 'viewall_frame'
%]
[% ELSE %]
<iframe src="attachment.cgi?id=[% a.id %]" class="viewall_frame">
<iframe src="attachment.cgi?id=[% a.id %]" class="viewall_frame" sandbox>
<b>You cannot view the attachment on this page because your browser does not support IFRAMEs.
<a href="attachment.cgi?id=[% a.id %]">View the attachment on a separate page</a>.</b>
</iframe>