[Ur] Few patches

Adam Chlipala adamc at csail.mit.edu
Sat Aug 23 09:37:00 EDT 2014


On 08/23/2014 08:09 AM, Sergey Mironov wrote:
> Hi. I have three less-important patches for the Ur/Web I didn't sent
> to this list. Here they are:
>
> 1_of_3_Add_basic_support_for__meta__tag.patch
>
> Enables <meta> tag which is used in some Bootstrap examples

This one scares me.  It's a serious code injection vector, right? Can't 
<meta> be used to cause arbitrary side effects according to how browsers 
interpret HTTP headers?

> 2_of_3_Add__role__data_attribute_.patch
>
> Adds role=String attribute to every tag. Again, used by the
> Bootstrap's javascript library.
>
> 3_of_3_Check_realloc_s_return_code_to_prevent_segfault_on_out_of_memoty_condition.patch
>
> Just an obvious fix.
>
> Please, review and apply if you find they are OK

These two look great.  I've pushed them.  Thanks!



More information about the Ur mailing list