SVG filter incorrectly used the m modifier when checking if an href
attribute started with 'https?://', incorrectly matching attributes
such as, "javascript:alert(' http://foo')".
Bug: T122653
Change-Id: I41291fff344241cad3171f3e8050de99b62a2296
Signed-off-by: Chad Horohoe <chadh@wikimedia.org>
|
||
|---|---|---|
| .. | ||
| UploadBase.php | ||
| UploadFromChunks.php | ||
| UploadFromFile.php | ||
| UploadFromStash.php | ||
| UploadFromUrl.php | ||
| UploadStash.php | ||