[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    [SECURITY PATCH]:  Bug#43354:File upload fields can have value attributes
From:       "Dawit A." <adawit () kde ! org>
Date:       2002-06-02 7:48:54
[Download RAW message or body]

Hi,

This patch is to fix the afformentioned bug.

Regards,
Dawit A.
["html_formimpl.diff" (text/x-diff)]

Index: html_formimpl.cpp
===================================================================
RCS file: /home/kde/kdelibs/khtml/html/html_formimpl.cpp,v
retrieving revision 1.272
diff -u -p -b -B -w -r1.272 html_formimpl.cpp
--- html_formimpl.cpp	2002/05/22 12:53:00	1.272
+++ html_formimpl.cpp	2002/06/02 07:45:47
@@ -999,6 +999,10 @@ void HTMLInputElementImpl::init()
     case IMAGE:
         break;
     };
+    
+    if (m_type == FILE)
+      setAttribute(ATTR_VALUE, QString::null);
+          
     m_value = getAttribute(ATTR_VALUE);
     if ((uint) m_type <= ISINDEX && !m_value.isEmpty()) {
         QString value = m_value.string();


[prev in list] [next in list] [prev in thread] [next in thread]