googlearchive / caja

Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.
Apache License 2.0
1.13k stars 113 forks source link

Attack review: mikesamuel/assign-op-rules (33 added, 69 removed, 73 changed) #680

Closed kpreid closed 9 years ago

kpreid commented 9 years ago

Original issue 680 created by mikesamuel on 2008-08-13T00:26:16.000Z:

gvn review mikesamuel/assign-op-rules

*mikesamuel/assign-op-rules@2154 | mikesamuel | 2008-08-12 16:15:05 -0800 (Tue, 12 Aug 2008)

Description:

Changed handling of (+=, -=, ++, etc.) operators in DefaultCajaRewriter and Rule.

Previously, the code in Rule which decomposed a read-assign operator into temporaries and an assignment assumed that rewriting a LeftHandSideExpression would produce a LeftHandSideExpression. This is not true of the valija rewriting rules.

This removes that constraint.

Also,

Affected Paths: M //trunk/src/com/google/caja/caja.js M //trunk/src/com/google/caja/parser/quasiliteral/DefaultCajaRewriter.java M //trunk/src/com/google/caja/parser/quasiliteral/Rule.java M //trunk/tests/com/google/caja/parser/js/JsFunFuzz.java M //trunk/tests/com/google/caja/parser/quasiliteral/DefaultCajaRewriterTest.java M //trunk/tests/com/google/caja/parser/quasiliteral/InnocentCodeRewriterTest.java M //trunk/tests/com/google/caja/plugin/CssPropertyPatternsTest.java M //trunk/tests/com/google/caja/plugin/DomProcessingEventsTest.java M //trunk/tests/com/google/caja/plugin/HtmlCompiledPluginTest.java M //trunk/tests/com/google/caja/plugin/stages/DebuggingSymbolsStageTest.java M //trunk/tests/com/google/caja/util/RhinoTestBed.java

kpreid commented 9 years ago

Comment #1 originally posted by mikesamuel on 2008-08-13T22:34:09.000Z:

<empty>

kpreid commented 9 years ago

Comment #2 originally posted by erights on 2008-09-16T07:27:43.000Z:

<empty>

kpreid commented 9 years ago

Comment #3 originally posted by mikesamuel on 2009-01-13T20:13:32.000Z:

Attack reviews are to be conducted pre-release.

kpreid commented 9 years ago

Comment #4 originally posted by mikesamuel on 2009-01-13T20:58:51.000Z:

<empty>