Re: [whatwg/fetch] Prevent requests to URLs containing raw `\n` and `<`. (#546) from Mike West on 2017-05-22 (public-webapps-github@w3.org from May 2017)

From: Mike West <notifications@github.com>
Date: Mon, 22 May 2017 03:43:36 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/546/303064872@github.com>

Old fetch patch at https://github.com/whatwg/fetch/pull/519, old URL patch at https://github.com/whatwg/url/pull/284. Tests at https://cs.chromium.org/chromium/src/third_party/WebKit/LayoutTests/http/tests/security/dangling-markup/src-attribute.html, which I'll happily upstream if other folks are interested.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/546#issuecomment-303064872

Received on Monday, 22 May 2017 10:44:11 UTC