Download
Getting Started
Members
Projects
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
More
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
Toggle navigation
Bugzilla – Attachment 139096 Details for
Bug 280166
[CLabel] script injection vulnerability
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
Terms of Use
|
Copyright Agent
Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read
this important communication.
[patch]
Bugfix - escapes text before it is sent to the client
clipboard.txt (text/plain), 1.32 KB, created by
RĂ¼diger Herrmann
on 2009-06-13 07:06:19 EDT
(
hide
)
Description:
Bugfix - escapes text before it is sent to the client
Filename:
MIME Type:
Creator:
RĂ¼diger Herrmann
Created:
2009-06-13 07:06:19 EDT
Size:
1.32 KB
patch
obsolete
>### Eclipse Workspace Patch 1.0 >#P org.eclipse.rap.rwt.q07 >Index: src/org/eclipse/swt/internal/custom/clabelkit/CLabelLCA.java >=================================================================== >RCS file: /cvsroot/rt/org.eclipse.rap/runtime.rwt/org.eclipse.rap.rwt.q07/src/org/eclipse/swt/internal/custom/clabelkit/CLabelLCA.java,v >retrieving revision 1.4 >diff -u -r1.4 CLabelLCA.java >--- src/org/eclipse/swt/internal/custom/clabelkit/CLabelLCA.java 10 Oct 2008 15:09:25 -0000 1.4 >+++ src/org/eclipse/swt/internal/custom/clabelkit/CLabelLCA.java 13 Jun 2009 11:07:19 -0000 >@@ -49,7 +49,6 @@ > CLabel label = ( CLabel )widget; > JSWriter writer = JSWriter.getWriterFor( label ); > writer.newWidget( "qx.ui.basic.Atom" ); >- > if( ( widget.getStyle() & SWT.SHADOW_IN ) != 0 ) { > writer.call( "addState", new Object[]{ "rwt_SHADOW_IN" } ); > } else if( ( widget.getStyle() & SWT.SHADOW_OUT ) != 0 ) { >@@ -86,7 +85,8 @@ > private static void writeText( final CLabel label ) throws IOException { > if( WidgetLCAUtil.hasChanged( label, PROP_TEXT, label.getText(), "" ) ) { > JSWriter writer = JSWriter.getWriterFor( label ); >- writer.set( JSConst.QX_FIELD_LABEL, label.getText() ); >+ String text = WidgetLCAUtil.escapeText( label.getText(), false ); >+ writer.set( JSConst.QX_FIELD_LABEL, text ); > } > } >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 280166
: 139096