@Dev: You're right about the script-nonce directive. However, at the moment I'm
thinking in multiple directions and not everything I ask might sound logical on
it's on. I hope things will become more clearly soon. In this specific case I'm
actually looking for a way to check, if a script element contains some specific
class value.
@Boris: for <script class="A B C"> I only want to know if script is member of
class "A", a mere true/false descision. If the class attribute contains also a
value "B", "C" or other values is completely uninteresting and can (and should)
be ignored for now. If it does contain "A" the script will be processed, if it
does not, it will be skipped. Referring to your last post, would
int32_t containsClassVar = scriptElem->FindAttrValueIn(kNameSpaceID_None,
nsGkAtoms::_class, NS_LITERAL_STRING("xyz"), eCaseMatters);
work correctly or should I better use
bool containsClassVar = scriptElem->AttrValueIs(kNameSpaceID_None,
nsGkAtoms::_class, NS_LITERAL_STRING("xyz"), eCaseMatters);
???
Jeremy
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
