corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1835157 - Ignore target names which contain both newline and < characters. r=emilio

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D210480
This commit is contained in:
Tom Schuster
2024-05-24 08:09:36 +00:00
parent ee9cae7415
commit c223046d21
13 changed files with 62 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
dom/html/HTMLFormElement.cpp
View File

@@ -1671,6 +1671,22 @@ nsresult HTMLFormElement::GetActionURL(nsIURI** aActionURL,
return rv;
}
void HTMLFormElement::GetSubmissionTarget(nsGenericHTMLElement* aSubmitter,
nsAString& aTarget) {
// https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#form-submission-algorithm
// 19. If the submitter element is a submit button and it has a formtarget
// attribute, then set formTarget to the formtarget attribute value.
// 20. Let target be the result of getting an element's target given
// submitter's form owner and formTarget.
//
// Note: Falling back to the base target is part of "get an element's target".
if (!(aSubmitter && aSubmitter->GetAttr(nsGkAtoms::formtarget, aTarget)) &&
!GetAttr(nsGkAtoms::target, aTarget)) {
GetBaseTarget(aTarget);
}
SanitizeLinkOrFormTarget(aTarget);
}
nsGenericHTMLFormElement* HTMLFormElement::GetDefaultSubmitElement() const {
MOZ_ASSERT(mDefaultSubmitElement == mFirstSubmitInElements ||
mDefaultSubmitElement == mFirstSubmitNotInElements,