Closed Bug 306096 Opened 19 years ago Closed 13 years ago

SVG security review: content that references content

Categories

(Core :: SVG, defect)

Product:
Core
Component:
SVG
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jruderman, Unassigned)

References

(
URL
)

Details

T Rowley mentioned that this is part of the SVG attack surface and could do with
a security review:

  * content that references content - nsSVGUseElement::LookupHref

http://lxr.mozilla.org/mozilla/source/content/svg/content/src/nsSVGUseElement.cpp#600
Blocks: 306101
Assignee: general → nobody
QA Contact: ian → general
Feel free to reopen if this is going to actually happen.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.