diff options
| author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2018-01-29 11:38:00 +0100 |
|---|---|---|
| committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2018-02-02 09:41:21 +0000 |
| commit | 0d62ec3da6b22576c666a839dddb7105f0047a68 (patch) | |
| tree | 98e8aa4f2c9d4f7fe3d649c1375e6d1f64321197 /chromium/third_party/WebKit/Source/core/html/HTMLTextAreaElement.h | |
| parent | 232288de9e12c0c4fb8b5686a7fe81280ee4852f (diff) | |
| download | qtwebengine-chromium-0d62ec3da6b22576c666a839dddb7105f0047a68.tar.gz | |
[Backport] Block dotless-i / j + a combining mark
U+0131 (doltess i) and U+0237 (dotless j) are blocked from being
followed by a combining mark in U+0300 block.
Bug: 774842
Test: See the bug
Reviewed-on: https://chromium-review.googlesource.com/767888
Commit-Queue: Jungshik Shin <jshin@chromium.org>
Reviewed-by: Peter Kasting <pkasting@chromium.org>
Cr-Commit-Position: refs/heads/master@{#517605}
(CVE-2018-6050)
Change-Id: Ib2dce153bc81de78a9f6b5d867d3729a4c2d3985
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
Diffstat (limited to 'chromium/third_party/WebKit/Source/core/html/HTMLTextAreaElement.h')
0 files changed, 0 insertions, 0 deletions