Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(150)

Unified Diff: Source/WebCore/html/parser/XSSAuditor.h

Issue 9701035: Merge 108881 - XSS Auditor targeting legitimate frames as false positives. (Closed) Base URL: http://svn.webkit.org/repository/webkit/branches/chromium/1025/
Patch Set: Created 8 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | Source/WebCore/html/parser/XSSAuditor.cpp » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: Source/WebCore/html/parser/XSSAuditor.h
===================================================================
--- Source/WebCore/html/parser/XSSAuditor.h (revision 110728)
+++ Source/WebCore/html/parser/XSSAuditor.h (working copy)
@@ -71,9 +71,10 @@
bool eraseDangerousAttributesIfInjected(HTMLToken&);
bool eraseAttributeIfInjected(HTMLToken&, const QualifiedName&, const String& replacementValue = String(), AttributeKind treatment = NormalAttribute);
- String snippetForRange(const HTMLToken&, int start, int end);
- String snippetForJavaScript(const String&);
+ String decodedSnippetForToken(const HTMLToken&);
+ String decodedSnippetForName(const HTMLToken&);
String decodedSnippetForAttribute(const HTMLToken&, const HTMLToken::Attribute&, AttributeKind treatment = NormalAttribute);
+ String decodedSnippetForJavaScript(const HTMLToken&);
bool isContainedInRequest(const String&);
bool isSameOriginResource(const String& url);
@@ -87,7 +88,7 @@
OwnPtr<SuffixTree<ASCIICodebook> > m_decodedHTTPBodySuffixTree;
State m_state;
- String m_cachedSnippet;
+ String m_cachedDecodedSnippet;
bool m_notifiedClient;
};
« no previous file with comments | « no previous file | Source/WebCore/html/parser/XSSAuditor.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698