[Ur] Few patches
Adam Chlipala
adamc at csail.mit.edu
Sat Aug 23 09:37:00 EDT 2014
On 08/23/2014 08:09 AM, Sergey Mironov wrote:
> Hi. I have three less-important patches for the Ur/Web I didn't sent
> to this list. Here they are:
>
> 1_of_3_Add_basic_support_for__meta__tag.patch
>
> Enables <meta> tag which is used in some Bootstrap examples
This one scares me. It's a serious code injection vector, right? Can't
<meta> be used to cause arbitrary side effects according to how browsers
interpret HTTP headers?
> 2_of_3_Add__role__data_attribute_.patch
>
> Adds role=String attribute to every tag. Again, used by the
> Bootstrap's javascript library.
>
> 3_of_3_Check_realloc_s_return_code_to_prevent_segfault_on_out_of_memoty_condition.patch
>
> Just an obvious fix.
>
> Please, review and apply if you find they are OK
These two look great. I've pushed them. Thanks!
More information about the Ur
mailing list