Closed
Bug 732181
Opened 13 years ago
Closed 6 years ago
escape formdata in sessionstore
Categories
(Firefox :: Session Restore, defect)
Firefox
Session Restore
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: zpao, Unassigned)
References
Details
(Keywords: sec-moderate, Whiteboard: [sg:moderate])
Attachments
(1 file, 1 obsolete file)
(deleted),
patch
|
dietrich
:
review+
|
Details | Diff | Splinter Review |
identifier and value need to be escaped
Marking sg:moderate based on a similar rating in bug 730531, Paul said to assign to him.
Assignee: nobody → paul
Whiteboard: [sg:moderate]
Reporter | ||
Comment 2•13 years ago
|
||
The first test file change wasn't needed (but doing that made it much easier to hunt down the failure I had).
The other test changes were needed to make everything pass.
Attachment #617984 -
Flags: review?(dietrich)
Reporter | ||
Comment 3•13 years ago
|
||
Just tests for all of these now encoded strings
Attachment #617984 -
Attachment is obsolete: true
Attachment #617985 -
Flags: review?(dietrich)
Attachment #617984 -
Flags: review?(dietrich)
Updated•13 years ago
|
Attachment #617985 -
Flags: review?(dietrich) → review+
Updated•13 years ago
|
Keywords: sec-moderate
Reporter | ||
Updated•11 years ago
|
Assignee: paul → nobody
Updated•9 years ago
|
Group: core-security → firefox-core-security
Comment 4•6 years ago
|
||
Since we're now compressing the sessionstore file, which includes form data, this is not an issue anymore.
Comment 5•6 years ago
|
||
Gijs, can you clear the sec group here too?
Flags: needinfo?(gijskruitbosch+bugs)
Updated•6 years ago
|
Group: firefox-core-security
Flags: needinfo?(gijskruitbosch+bugs)
You need to log in
before you can comment on or make changes to this bug.
Description
•