On 08/23/2014 08:09 AM, Sergey Mironov wrote:
Hi. I have three less-important patches for the Ur/Web I didn't sent
to this list. Here they are:

1_of_3_Add_basic_support_for__meta__tag.patch

Enables <meta> tag which is used in some Bootstrap examples

This one scares me. It's a serious code injection vector, right? Can't <meta> be used to cause arbitrary side effects according to how browsers interpret HTTP headers?

2_of_3_Add__role__data_attribute_.patch

Adds role=String attribute to every tag. Again, used by the
Bootstrap's javascript library.

3_of_3_Check_realloc_s_return_code_to_prevent_segfault_on_out_of_memoty_condition.patch

Just an obvious fix.

Please, review and apply if you find they are OK

These two look great.  I've pushed them.  Thanks!

_______________________________________________
Ur mailing list
[email protected]
http://www.impredicative.com/cgi-bin/mailman/listinfo/ur

Reply via email to