HomePhabricator

SECURITY: Add data attribute to patrol links so it can't be spoofed by user

Tags
None
Referenced Files
None
Subscribers
None

Description

SECURITY: Add data attribute to patrol links so it can't be spoofed by user

Javascript used to look just for the patrollinks class, which
could be set by the user in order to patrol an arbitrary page.

Bug: T103239
Change-Id: I13fcc3ce479c0a4a90a6217c2e5244f051eaf862

Signed-off-by: Chad Horohoe <[email protected]>

Details

Provenance
BawolffAuthored on Oct 27 2015, 8:31 AM
demonCommitted on May 20 2016, 4:25 PM
Parents
rMW9ec1ef7308ac: API: Add "standard" header and hook for lacksSameOriginSecurity()
Branches
Unknown
Tags
Unknown
ChangeId
I13fcc3ce479c0a4a90a6217c2e5244f051eaf862

Event Timeline