Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

59189 - Make sure that SanitizeKey() is accessed only by the attribute token.

Browse Source 
r=jar
sr=scc


git-svn-id: svn://10.0.0.236/trunk@82333 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
harishd%netscape.com 2000-11-06 06:03:34 +00:00
parent d3809c9caf
commit 73f54d3808
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
mozilla/htmlparser/src/CNavDTD.cpp
View File

@ -2268,6 +2268,14 @@ nsresult CNavDTD::CollectAttributes(nsCParserNode& aNode,eHTMLTags aTag,PRInt32
theToken=(CToken*)mSkippedContent.PopFront();
else theToken=mTokenizer->PopToken();
if(theToken) {
eHTMLTokenTypes theType=eHTMLTokenTypes(theToken->GetTokenType());
if(theType!=eToken_attribute) {
// If you're here then it means that the token does not
// belong to this node. Put the token back into the tokenizer
// and let it go thro' the regular path. Bug: 59189.
mTokenizer->PushTokenFront(theToken);
break;
}
// Sanitize the key for it might contain some non-alpha-non-digit characters
// at its end. Ex. <OPTION SELECTED/> - This will be tokenized as "<" "OPTION",
// "SELECTED/", and ">". In this case the "SELECTED/" key will be sanitized to

8
mozilla/parser/htmlparser/src/CNavDTD.cpp
View File

@ -2268,6 +2268,14 @@ nsresult CNavDTD::CollectAttributes(nsCParserNode& aNode,eHTMLTags aTag,PRInt32
theToken=(CToken*)mSkippedContent.PopFront();
else theToken=mTokenizer->PopToken();
if(theToken) {
eHTMLTokenTypes theType=eHTMLTokenTypes(theToken->GetTokenType());
if(theType!=eToken_attribute) {
// If you're here then it means that the token does not
// belong to this node. Put the token back into the tokenizer
// and let it go thro' the regular path. Bug: 59189.
mTokenizer->PushTokenFront(theToken);
break;
}
// Sanitize the key for it might contain some non-alpha-non-digit characters
// at its end. Ex. <OPTION SELECTED/> - This will be tokenized as "<" "OPTION",
// "SELECTED/", and ">". In this case the "SELECTED/" key will be sanitized to