Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code | Sign in
(301)

Issue 216045: Safe json parsing for caja code (Closed)

Can't Edit
Can't Publish+Mail
Start Review
Created:
15 years, 11 months ago by Jasvir
Modified:
15 years, 10 months ago
Reviewers:
johnfargo, Paul Lindner
CC:
shindig.remailer_gmail.com
Base URL:
https://svn.apache.org/repos/asf/shindig/trunk/
Visibility:
Public.

Description

* binds safejson to gadgets.json.stringify which skips over caja specific properties and only serializes properties a gadget has access to. * use json_sans_eval to parse json rather than eval @916013

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+56 lines, -10 lines) Patch
M features/src/main/javascript/features/caja/taming.js View 1 chunk +1 line, -4 lines 0 comments Download
M features/src/main/javascript/features/core.json/taming.js View 1 chunk +2 lines, -4 lines 0 comments Download
M features/src/main/javascript/features/core.log/taming.js View 1 chunk +1 line, -2 lines 0 comments Download
M java/server/src/test/java/org/apache/shindig/server/endtoend/EndToEndTest.java View 2 chunks +11 lines, -0 lines 0 comments Download
A java/server/src/test/resources/endtoend/jsonTest.xml View 1 chunk +41 lines, -0 lines 0 comments Download

Messages

Total messages: 2
Jasvir
15 years, 10 months ago (2010-02-24 18:48:48 UTC) #1
Paul Lindner
15 years, 10 months ago (2010-02-24 21:46:29 UTC) #2
lgtm, although I can't comment on the caja usages.  Thanks for fixing up the
core.log taming.js
Sign in to reply to this message.

Powered by Google App Engine
RSS Feeds Recent Issues | This issue
This is Rietveld f62528b