Handle URL encode and decode

Project: http://git-wip-us.apache.org/repos/asf/flex-sdk/repo
Commit: http://git-wip-us.apache.org/repos/asf/flex-sdk/commit/695151d4
Tree: http://git-wip-us.apache.org/repos/asf/flex-sdk/tree/695151d4
Diff: http://git-wip-us.apache.org/repos/asf/flex-sdk/diff/695151d4

Branch: refs/heads/master
Commit: 695151d4db413f4a076e5421bfbd6fb2c005265b
Parents: 120d9c8
Author: Tom Chiverton <falken@wopr.house>
Authored: Wed Mar 25 18:29:48 2015 +0000
Committer: Erik de Bruin <e...@ixsoftware.nl>
Committed: Wed Mar 25 19:41:42 2015 +0100

----------------------------------------------------------------------
 asdoc/templates/index.html | 11 +++++++++++
 1 file changed, 11 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/flex-sdk/blob/695151d4/asdoc/templates/index.html
----------------------------------------------------------------------
diff --git a/asdoc/templates/index.html b/asdoc/templates/index.html
index f970930..b9e46cd 100644
--- a/asdoc/templates/index.html
+++ b/asdoc/templates/index.html
@@ -20,6 +20,17 @@
     <script language="javascript" type="text/javascript">
        <!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
                        var args=d.substring(d.lastIndexOf('?')+1,d.length);
                        var classFrameContent=args;

Reply via email to