Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code | Sign in
(7)

Issue 224064: Add image/x-icon to Blacklisted types from encoding detection

Can't Edit
Can't Publish+Mail
Start Review
Created:
15 years, 10 months ago by zhoresh
Modified:
15 years, 10 months ago
Reviewers:
johnfargo, chirag, shindig.remailer
Base URL:
http://svn.apache.org/repos/asf/shindig/trunk/
Visibility:
Public.

Description

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+2 lines, -1 line) Patch
java/gadgets/src/main/java/org/apache/shindig/gadgets/http/HttpResponse.java View 2 chunks +2 lines, -1 line 0 comments Download

Messages

Total messages: 7
zhoresh
15 years, 10 months ago (2010-02-25 23:34:56 UTC) #1
zhoresh
This is the simple fix of just adding type to blacklist. Is it time to ...
15 years, 10 months ago (2010-02-25 23:39:39 UTC) #2
johnfargo
This change looks fine as-is, but I agree that a whitelist approach is preferable. I'd ...
15 years, 10 months ago (2010-02-26 01:09:58 UTC) #3
johnfargo
Committed this patch: it's a clear win over the current code. Thoughts from any others ...
15 years, 10 months ago (2010-02-26 01:16:41 UTC) #4
chirag
Why was image/x-icon added to the blacklist, but not: image/vnd.microsoft.icon, image/ico, image/icon, text/ico, application/ico On ...
15 years, 10 months ago (2010-02-26 02:19:50 UTC) #5
johnfargo
Because that's the particular use case we saw in our logs resulting in uncaught exceptions ...
15 years, 10 months ago (2010-02-26 07:23:54 UTC) #6
chirag
15 years, 10 months ago (2010-02-26 18:35:55 UTC) #7
Ah, got it.  +1 to a whitelist

On 2010/02/26 07:23:54, johnfargo wrote:
> Because that's the particular use case we saw in our logs resulting in
> uncaught exceptions :)
> 
> IMO your examples call for changing the blacklist to whitelist as discussed.
> See any noteworthy issues w/ that option?
> 
> Thanks,
> John
> 
> On Thu, Feb 25, 2010 at 6:19 PM, <mailto:chiragshah1@gmail.com> wrote:
> 
> > Why was image/x-icon added to the blacklist, but not:
> > image/vnd.microsoft.icon, image/ico, image/icon, text/ico,
> > application/ico
> >
> >
> > On 2010/02/25 23:39:39, zhoresh wrote:
> >
> >> This is the simple fix of just adding type to blacklist.
> >>
> >
> >  Is it time to revisit this and run the encoding detector only on
> >>
> > text/html or
> >
> >> text/* instead of using blacklist?
> >>
> >
> >
> >
> > http://codereview.appspot.com/224064/show
> >
>
Sign in to reply to this message.

Powered by Google App Engine
RSS Feeds Recent Issues | This issue
This is Rietveld f62528b