SVG filter incorrectly used the m modifier when checking if an href
attribute started with 'https?://', incorrectly matching attributes
such as, "javascript:alert(' http://foo')".
Bug: T122653
Change-Id: I41291fff344241cad3171f3e8050de99b62a2296
Signed-off-by: Chad Horohoe <chadh@wikimedia.org>
|
||
|---|---|---|
| .. | ||
| UploadBaseTest.php | ||
| UploadFromUrlTest.php | ||
| UploadStashTest.php | ||