[Gnash-commit] gnash ChangeLog server/vm/ASHandlers.cpp

[Sandro Santilli]

CVSROOT:        /sources/gnash
Module name:    gnash
Changes by:     Sandro Santilli <strk>  07/05/14 20:06:49

Modified files:
        .              : ChangeLog 
        server/vm      : ASHandlers.cpp 

Log message:
                * server/vm/ASHandlers.cpp (CommonGetUrl): check url security 
also
                  when invoking firefox.

CVSWeb URLs:
http://cvs.savannah.gnu.org/viewcvs/gnash/ChangeLog?cvsroot=gnash&r1=1.3207&r2=1.3208
http://cvs.savannah.gnu.org/viewcvs/gnash/server/vm/ASHandlers.cpp?cvsroot=gnash&r1=1.103&r2=1.104

Patches:
Index: ChangeLog
===================================================================
RCS file: /sources/gnash/gnash/ChangeLog,v
retrieving revision 1.3207
retrieving revision 1.3208
diff -u -b -r1.3207 -r1.3208
--- ChangeLog   14 May 2007 19:04:46 -0000      1.3207
+++ ChangeLog   14 May 2007 20:06:48 -0000      1.3208
@@ -1,5 +1,7 @@
 2007-05-14 Sandro Santilli <address@hidden>
 
+       * server/vm/ASHandlers.cpp (CommonGetUrl): check url security also
+         when invoking firefox.
        * server/font.cpp (readDefineFont, readDefineFont2_or_3): use 
          symbolic names for tag type.
        * server/parser/shape_character_def.cpp (read): temporarely 

Index: server/vm/ASHandlers.cpp
===================================================================
RCS file: /sources/gnash/gnash/server/vm/ASHandlers.cpp,v
retrieving revision 1.103
retrieving revision 1.104
diff -u -b -r1.103 -r1.104
--- server/vm/ASHandlers.cpp    28 Apr 2007 17:05:53 -0000      1.103
+++ server/vm/ASHandlers.cpp    14 May 2007 20:06:48 -0000      1.104
@@ -17,7 +17,7 @@
 // Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 //
 
-/* $Id: ASHandlers.cpp,v 1.103 2007/04/28 17:05:53 strk Exp $ */
+/* $Id: ASHandlers.cpp,v 1.104 2007/05/14 20:06:48 strk Exp $ */
 
 #ifdef HAVE_CONFIG_H
 #include "config.h"
@@ -1879,6 +1879,11 @@
        }
        else
        {
+               if ( ! URLAccessManager::allow(url) )
+               {
+                       return;
+               }
+
                if ( sendVarsMethod )
                {
                        log_unimpl (_("Unhandled GetUrl2 sendVariableMethod 
(%d)"