mozilla.BenB%bucksch.org fac8d7631b - Bug 243040: Re-escape attribute values which Gecko unescaped for us. Not doing this allowed to insert arbitary unchecked HTML into the result. ...

- JS quotes in attribute values are now probably possible (but JS still usually disabled by allowed attribute prefs and javascript: URL blocker)
- removed base64 blocker which is probably pointless
- comment and debug changes
- little code style cleanup
r=akk, sr=jst


git-svn-id: svn://10.0.0.236/trunk@157445 18797224-902f-48f8-a5cc-f745e15eee43

2004-06-05 22:47:40 +00:00

..

public

bug 196380

2004-06-05 17:57:00 +00:00

src

- Bug 243040: Re-escape attribute values which Gecko unescaped for us. Not doing this allowed to insert arbitary unchecked HTML into the result.

2004-06-05 22:47:40 +00:00

Makefile.in

Bug 236613: change to MPL/LGPL/GPL tri-license.

2004-04-17 21:52:36 +00:00