eliott/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird synced 2026-04-26 17:55:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

LibWeb: Check if scripting is disabled before running script

Browse Source 
This is not a full check, it's just enough to prevent script execution
in DOMParser.
This commit is contained in:
Luke
2021-07-05 03:59:47 +01:00
committed by Andreas Kling
parent ce314c54bd
commit 0ea50d44bf
Notes: sideshowbarker 2024-07-18 10:24:40 +09:00 
Author: https://github.com/Lubrsi
Commit: https://github.com/SerenityOS/serenity/commit/0ea50d44bfd
Pull-request: https://github.com/SerenityOS/serenity/pull/8449
3 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
Userland/Libraries/LibWeb/HTML/HTMLScriptElement.cpp
View File

@@ -153,7 +153,10 @@ void HTMLScriptElement::prepare_script()
return;
}
// FIXME: Check if scripting is disabled, if so return
if (is_scripting_disabled()) {
dbgln("HTMLScriptElement: Refusing to run script because scripting is disabled.");
return;
}
if (m_script_type == ScriptType::Classic && has_attribute(HTML::AttributeNames::nomodule)) {
dbgln("HTMLScriptElement: Refusing to run classic script because it has the nomodule attribute.");