Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:42.3:Update
qutebrowser
qutebrowser-fix-history-xss.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File qutebrowser-fix-history-xss.patch of Package qutebrowser
--- a/qutebrowser/browser/qutescheme.py +++ b/qutebrowser/browser/qutescheme.py @@ -24,6 +24,7 @@ Module attributes: _HANDLERS: The handlers registered via decorators. """ +import html import json import os import sys @@ -245,7 +246,9 @@ def history_data(start_time): # noqa item_title = item.title if item.title else item_url item_time = int(item.atime * 1000) - yield {"url": item_url, "title": item_title, "time": item_time} + yield {"url": html.escape(item_url), + "title": html.escape(item_title), + "time": item_time} # if we reached here, we had reached the end of history yield {"next": int(last_item.atime if last_item else -1)}
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
