disallow https for remote loading as well
Project: http://git-wip-us.apache.org/repos/asf/couchdb/repo Commit: http://git-wip-us.apache.org/repos/asf/couchdb/commit/b99ec792 Tree: http://git-wip-us.apache.org/repos/asf/couchdb/tree/b99ec792 Diff: http://git-wip-us.apache.org/repos/asf/couchdb/diff/b99ec792 Branch: refs/heads/docs Commit: b99ec792110d0f06a42e38fb6f0208d3b6b3bcc7 Parents: 07a6af2 Author: Robin Berjon <ro...@berjon.com> Authored: Thu Oct 25 15:06:06 2012 +0200 Committer: Robert Newson <rnew...@apache.org> Committed: Thu Oct 25 14:14:24 2012 +0100 ---------------------------------------------------------------------- share/www/script/couch_test_runner.js | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/couchdb/blob/b99ec792/share/www/script/couch_test_runner.js ---------------------------------------------------------------------- diff --git a/share/www/script/couch_test_runner.js b/share/www/script/couch_test_runner.js index d1a53e9..b09aeab 100644 --- a/share/www/script/couch_test_runner.js +++ b/share/www/script/couch_test_runner.js @@ -16,6 +16,7 @@ function loadScript(url) { // disallow loading remote URLs if((url.substr(0, 7) == "http://";) + || (url.substr(0, 8) == "https://";) || (url.substr(0, 2) == "//") || (url.substr(0, 5) == "data:") || (url.substr(0, 11) == "javascript:")) {
