Skip to content

Warnings in AMO #2

@ofaurax

Description

@ofaurax
on* attribute being set using setAttribute

Avertissement: To prevent vulnerabilities, event handlers (like 'onclick' and 'onhover') should always be defined using addEventListener.
chrome/content/eotoolbar.js
var info = document.getElementById('eotoolbar-inforss');
info.setAttribute("oncommand",
    "gBrowser.selectedBrowser.loadURI('"+link.textContent+"');");

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions