gnash-commit
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Gnash-commit] [bug #38244] Gnash uses a double-escaped URL to invoke xd


From: Nachanon Vetjasit
Subject: [Gnash-commit] [bug #38244] Gnash uses a double-escaped URL to invoke xdg-open
Date: Sat, 02 Mar 2013 08:00:08 +0000
User-agent: Opera/9.64 (X11; Linux i686; U; en) Presto/2.1.1

Follow-up Comment #2, bug #38244 (project gnash):

The root cause is in movie_root::getURL in libcore/movie_root.cpp


/// Try to avoid letting flash movies execute
/// arbitrary commands (sic)
///
/// Maybe we should exec here, but if we do we might have problems
/// with complex urlOpenerFormats like:
///    firefox -remote 'openurl(%u)'
///
std::string safeurl = url.encode(urlstr);
boost::replace_all(command, "%u", safeurl);

log_debug("Launching URL: %s", command);
const int ret = std::system(command.c_str());



    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?38244>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]