Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(153)

Side by Side Diff: Source/core/html/parser/XSSAuditor.h

Issue 23441066: XSSAuditor bypass with frameset tags. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Rename function. Created 7 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2011 Adam Barth. All Rights Reserved. 2 * Copyright (C) 2011 Adam Barth. All Rights Reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions 5 * modification, are permitted provided that the following conditions
6 * are met: 6 * are met:
7 * 1. Redistributions of source code must retain the above copyright 7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer. 8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright 9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the 10 * notice, this list of conditions and the following disclaimer in the
(...skipping 68 matching lines...) Expand 10 before | Expand all | Expand 10 after
79 }; 79 };
80 80
81 bool filterStartToken(const FilterTokenRequest&); 81 bool filterStartToken(const FilterTokenRequest&);
82 void filterEndToken(const FilterTokenRequest&); 82 void filterEndToken(const FilterTokenRequest&);
83 bool filterCharacterToken(const FilterTokenRequest&); 83 bool filterCharacterToken(const FilterTokenRequest&);
84 bool filterScriptToken(const FilterTokenRequest&); 84 bool filterScriptToken(const FilterTokenRequest&);
85 bool filterObjectToken(const FilterTokenRequest&); 85 bool filterObjectToken(const FilterTokenRequest&);
86 bool filterParamToken(const FilterTokenRequest&); 86 bool filterParamToken(const FilterTokenRequest&);
87 bool filterEmbedToken(const FilterTokenRequest&); 87 bool filterEmbedToken(const FilterTokenRequest&);
88 bool filterAppletToken(const FilterTokenRequest&); 88 bool filterAppletToken(const FilterTokenRequest&);
89 bool filterIframeToken(const FilterTokenRequest&); 89 bool filterFrameToken(const FilterTokenRequest&);
90 bool filterMetaToken(const FilterTokenRequest&); 90 bool filterMetaToken(const FilterTokenRequest&);
91 bool filterBaseToken(const FilterTokenRequest&); 91 bool filterBaseToken(const FilterTokenRequest&);
92 bool filterFormToken(const FilterTokenRequest&); 92 bool filterFormToken(const FilterTokenRequest&);
93 bool filterInputToken(const FilterTokenRequest&); 93 bool filterInputToken(const FilterTokenRequest&);
94 bool filterButtonToken(const FilterTokenRequest&); 94 bool filterButtonToken(const FilterTokenRequest&);
95 95
96 bool eraseDangerousAttributesIfInjected(const FilterTokenRequest&); 96 bool eraseDangerousAttributesIfInjected(const FilterTokenRequest&);
97 bool eraseAttributeIfInjected(const FilterTokenRequest&, const QualifiedName &, const String& replacementValue = String(), AttributeKind treatment = NormalAt tribute); 97 bool eraseAttributeIfInjected(const FilterTokenRequest&, const QualifiedName &, const String& replacementValue = String(), AttributeKind treatment = NormalAt tribute);
98 98
99 String decodedSnippetForToken(const HTMLToken&); 99 String decodedSnippetForToken(const HTMLToken&);
(...skipping 17 matching lines...) Expand all
117 117
118 State m_state; 118 State m_state;
119 bool m_scriptTagFoundInRequest; 119 bool m_scriptTagFoundInRequest;
120 unsigned m_scriptTagNestingLevel; 120 unsigned m_scriptTagNestingLevel;
121 WTF::TextEncoding m_encoding; 121 WTF::TextEncoding m_encoding;
122 }; 122 };
123 123
124 } 124 }
125 125
126 #endif 126 #endif
OLDNEW
« no previous file with comments | « LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl ('k') | Source/core/html/parser/XSSAuditor.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698