From db0b7bc7d0d20f3df1d4f4fa15a1d2bbea83ee7f Mon Sep 17 00:00:00 2001 From: "sdagley%netscape.com" Date: Sat, 5 Sep 1998 02:41:28 +0000 Subject: [PATCH] Merging fix from 4.0x branch. It's not clear that we really want to call GetURLForReferral when the passed referer is NIL since it breaks Smart Browsing keywords and does not actually appear to be needed to fix bug #90892 (which is why it was originally added). It's also a security hole since it causes the URL of the front window to be sent as the referer even if the user manually types in a URL. git-svn-id: svn://10.0.0.236/trunk@9403 18797224-902f-48f8-a5cc-f745e15eee43 --- mozilla/cmd/macfe/central/CURLDispatcher.cp | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/mozilla/cmd/macfe/central/CURLDispatcher.cp b/mozilla/cmd/macfe/central/CURLDispatcher.cp index b174142f10a..6fe5cec394a 100644 --- a/mozilla/cmd/macfe/central/CURLDispatcher.cp +++ b/mozilla/cmd/macfe/central/CURLDispatcher.cp @@ -825,6 +825,11 @@ CURLDispatchInfo::CURLDispatchInfo( mIsWaitingForMochaImageLoad(inWaitingForMochaImageLoad), mWindowResID(inWindowResID) { +#if 0 +// It's not clear that we really want to call GetURLForReferral when the passed referer is +// NIL since it breaks Smart Browsing keywords and does not actually appear to be needed to +// fix bug #90892. It's also a security hole since it causes the URL of the front window to +// be sent as the referer even if the user manually types in a URL. if (inTargetContext && mURLStruct->referer == NULL) { cstring theReferer = inTargetContext->GetCurrentURL(); @@ -832,6 +837,8 @@ CURLDispatchInfo::CURLDispatchInfo( mURLStruct->referer = XP_STRDUP(theReferer); mTargetContext = inTargetContext; } +#endif + if (inURLStruct) mURLType = NET_URL_Type(NET_URLStruct_Address(inURLStruct)); else