base href removed if textarea with name attribute have a-tag and POST
Reported by
hur...@gmail.com,
Aug 11 2016
|
|||||
Issue descriptionUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/51.0.2704.79 Chrome/51.0.2704.79 Safari/537.36 Example URL: https://github.com/larvit/chromebug Steps to reproduce the problem: 1. See git-repo 2. 3. What is the expected behavior? base href should remain intact (in the example being "/") What went wrong? base href gets removed to an empty string "" Does it occur on multiple sites: Yes Is it a problem with a plugin? No Did this work before? N/A Does this work in other browsers? Yes Chrome version: 51.0.2704.79 Channel: stable OS Version: Ubuntu 16.04 64-bit Flash Version: Tested in Firefox and it works there. Not tested in other browsers.
,
Aug 11 2016
Sounds like an XSSAuditor issue.
,
Feb 14 2017
It does flag the POST as an XSS Auditor violation. Tom, WDYT?
,
Feb 23 2017
Issue 485291 has been merged into this issue.
,
Feb 23 2017
Issue 612672 has been merged into this issue.
,
Feb 23 2017
,
Feb 23 2017
,
Nov 10 2017
,
Feb 18 2018
|
|||||
►
Sign in to add a comment |
|||||
Comment 1 by dtapu...@chromium.org
, Aug 11 2016