Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code | Sign in
(64)

Issue 67720043: Fix Issue 1893 "uriPolicy.mitigate() does not actually prevent mitigation" (Closed)

Can't Edit
Can't Publish+Mail
Start Review
Created:
12 years ago by MarkM
Modified:
11 years, 11 months ago
CC:
google-caja-discuss_googlegroups.com
Base URL:
http://google-caja.googlecode.com/svn/trunk/
Visibility:
Public.

Description

Problem reported and fix suggested by James Keane at https://code.google.com/p/google-caja/issues/detail?id=1893 I probably forgot to add rewriteFunctionCalls to this list when I added it as another mitigation option.

Patch Set 1 #

Total comments: 6

Patch Set 2 : Fix Issue 1893 "uriPolicy.mitigate() does not actually prevent mitigation" #

Unified diffs Side-by-side diffs Delta from patch set Stats (+14 lines, -6 lines) Patch
M src/com/google/caja/plugin/html-emitter.js View 1 2 chunks +10 lines, -6 lines 0 comments Download
M src/com/google/caja/ses/startSES.js View 1 1 chunk +4 lines, -0 lines 0 comments Download

Messages

Total messages: 17
MarkM
12 years ago (2014-02-24 01:03:09 UTC) #1
kpreid_google
Because this is a third party patch, James Keane needs to sign the CLA at ...
12 years ago (2014-02-24 18:09:05 UTC) #2
MarkM
CLA at https://code.google.com/p/google-caja/issues/detail?id=1893#c4
11 years, 12 months ago (2014-03-11 23:24:47 UTC) #3
MarkM
On 2014/03/11 23:24:47, MarkM wrote: > CLA at https://code.google.com/p/google-caja/issues/detail?id=1893#c4 Actually at https://dl.dropboxusercontent.com/u/238038461/Wishabi-Google.CLA.pdf
11 years, 12 months ago (2014-03-11 23:25:56 UTC) #4
kpreid_google
LGTM https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js File src/com/google/caja/plugin/html-emitter.js (right): https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js#newcode593 src/com/google/caja/plugin/html-emitter.js:593: rewriteFunctionCalls: false Please write the properties either in ...
11 years, 12 months ago (2014-03-11 23:31:21 UTC) #5
MarkM
Problem reported and fix suggested by James Keane at https://code.google.com/p/google-caja/issues/detail?id=1893 I probably forgot to add ...
11 years, 12 months ago (2014-03-12 00:03:15 UTC) #6
MarkM
https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js File src/com/google/caja/plugin/html-emitter.js (right): https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js#newcode593 src/com/google/caja/plugin/html-emitter.js:593: rewriteFunctionCalls: false On 2014/03/11 23:31:21, kpreid_google wrote: > Please ...
11 years, 12 months ago (2014-03-12 00:04:53 UTC) #7
kpreid_google
https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js File src/com/google/caja/plugin/html-emitter.js (right): https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js#newcode593 src/com/google/caja/plugin/html-emitter.js:593: rewriteFunctionCalls: false On 2014/03/12 00:04:53, MarkM wrote: > While ...
11 years, 12 months ago (2014-03-12 00:11:19 UTC) #8
MarkM
On 2014/03/12 00:11:19, kpreid_google wrote: > https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js > File src/com/google/caja/plugin/html-emitter.js (right): > > https://codereview.appspot.com/67720043/diff/1/src/com/google/caja/plugin/html-emitter.js#newcode593 > ...
11 years, 12 months ago (2014-03-12 05:49:21 UTC) #9
kpreid_google
On 2014/03/12 05:49:21, MarkM wrote: > On 2014/03/12 00:11:19, kpreid_google wrote: > > I do ...
11 years, 12 months ago (2014-03-12 16:29:07 UTC) #10
MarkM
Mike, Jas, Ihab, can you take a look at the mitigation issue to be sure ...
11 years, 12 months ago (2014-03-13 16:26:11 UTC) #11
Jasvir
+1 although in the absence of a compiler that checks the enum, it would help ...
11 years, 11 months ago (2014-03-16 00:31:04 UTC) #12
MarkM
Filed https://code.google.com/p/google-caja/issues/detail?id=1904 to keep track of good suggestions not implemented by this CL.
11 years, 11 months ago (2014-03-16 22:19:01 UTC) #13
MarkM
After a "myvn up", I get the following. The "myvn up" did update a bunch ...
11 years, 11 months ago (2014-03-16 22:23:19 UTC) #14
MarkM
The "myvn up" log: $ myvn up Updating '.': U src/com/google/caja/lang/html/html5-attributes-whitelist.json U src/com/google/caja/lang/html/html5-attributes-defs.json D third_party/java/appengine/docs ...
11 years, 11 months ago (2014-03-16 22:24:08 UTC) #15
felix8a
I think that means you need to update java? On Mar 16, 2014 3:23 PM, ...
11 years, 11 months ago (2014-03-17 02:21:00 UTC) #16
Mark S. Miller
11 years, 11 months ago (2014-03-17 02:53:05 UTC) #17
That was it. Thanks.


On Sun, Mar 16, 2014 at 7:20 PM, felix <felix8a@gmail.com> wrote:

> I think that means you need to update java?
> On Mar 16, 2014 3:23 PM, "Mark Miller" <erights@gmail.com> wrote:
>
>>  After a "myvn up", I get the following. The "myvn up" did update a
>> bunch of third_party/java/appengine/* stuff. What's the problem here, and
>> what should I do to get past it?
>>
>>
>>
>> $ ant clean
>>
>> Buildfile: /Users/erights/svn-changes/unrepair/google-caja/build.xml
>>
>>
>> BUILD FAILED
>>
>> /Users/erights/svn-changes/unrepair/google-caja/build.xml:125: The
>> following error occurred while executing this line:
>>
>>
/Users/erights/svn-changes/unrepair/google-caja/third_party/java/appengine/config/user/ant-macros.xml:83:
>> java.lang.UnsupportedClassVersionError:
>> com/google/appengine/tools/enhancer/EnhancerTask : Unsupported major.minor
>> version 51.0
>>
>> at java.lang.ClassLoader.defineClass1(Native Method)
>>
>> at java.lang.ClassLoader.defineClassCond(ClassLoader.java:637)
>>
>> at java.lang.ClassLoader.defineClass(ClassLoader.java:621)
>>
>> at
>>
org.apache.tools.ant.AntClassLoader.defineClassFromData(AntClassLoader.java:1128)
>>
>> at
>>
org.apache.tools.ant.AntClassLoader.getClassFromStream(AntClassLoader.java:1299)
>>
>> at
>>
org.apache.tools.ant.AntClassLoader.findClassInComponents(AntClassLoader.java:1354)
>>
>> at org.apache.tools.ant.AntClassLoader.findClass(AntClassLoader.java:1315)
>>
>> at org.apache.tools.ant.AntClassLoader.loadClass(AntClassLoader.java:1068)
>>
>> at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
>>
>> at java.lang.Class.forName0(Native Method)
>>
>> at java.lang.Class.forName(Class.java:249)
>>
>> at org.apache.tools.ant.taskdefs.Definer.addDefinition(Definer.java:579)
>>
>> at org.apache.tools.ant.taskdefs.Definer.execute(Definer.java:237)
>>
>> at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:292)
>>
>> at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
>>
>> at
>>
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>> at java.lang.reflect.Method.invoke(Method.java:597)
>>
>> at
>> org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
>>
>> at org.apache.tools.ant.Task.perform(Task.java:348)
>>
>> at org.apache.tools.ant.Target.execute(Target.java:435)
>>
>> at
>> org.apache.tools.ant.helper.ProjectHelper2.parse(ProjectHelper2.java:168)
>>
>> at
>> org.apache.tools.ant.taskdefs.ImportTask.importResource(ImportTask.java:230)
>>
>> at org.apache.tools.ant.taskdefs.ImportTask.execute(ImportTask.java:162)
>>
>> at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:292)
>>
>> at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
>>
>> at
>>
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>
>> at java.lang.reflect.Method.invoke(Method.java:597)
>>
>> at
>> org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
>>
>> at org.apache.tools.ant.Task.perform(Task.java:348)
>>
>> at org.apache.tools.ant.Target.execute(Target.java:435)
>>
>> at
>> org.apache.tools.ant.helper.ProjectHelper2.parse(ProjectHelper2.java:179)
>>
>> at
>> org.apache.tools.ant.ProjectHelper.configureProject(ProjectHelper.java:93)
>>
>> at org.apache.tools.ant.Main.runBuild(Main.java:826)
>>
>> at org.apache.tools.ant.Main.startAnt(Main.java:235)
>>
>> at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280)
>>
>> at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109)
>>
>>
>> Total time: 0 seconds
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Google Caja Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to google-caja-discuss+unsubscribe@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>  --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "Google Caja Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to google-caja-discuss+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>



-- 
    Cheers,
    --MarkM
Sign in to reply to this message.

Powered by Google App Engine
RSS Feeds Recent Issues | This issue
This is Rietveld f62528b