Ticket #527 (new defect)
_strip_css_comments may be unable to delete a comment
| Reported by: | uchida_t <dc578av_adle@…> | Owned by: | cmlenz |
|---|---|---|---|
| Priority: | major | Milestone: | 0.7 |
| Component: | General | Version: | 0.6 |
| Keywords: | Cc: |
Description
http://genshi.edgewall.org/browser/trunk/genshi/filters/html.py?rev=1175#L541
_strip_css_comments is called only once.
So in the following description, a css comment remains.
//#!html <div style="width: exp//**/**/ression(alert(1))">div</div>
I think this code is better.
def _strip_css_comments(self, text): while True: s = self._CSS_COMMENTS('', text) if s == text: return s
Attachments
Change History
Note: See
TracTickets for help on using
tickets.
