Re: Patch to bxeConfig.js

Christian Stocker <[email protected]> Sun, 14 Jan 2007 21:05:04 +0100
Newsgroups gmane.editors.bitflux.general
Organization Bitflux GmbH
Message-ID <[email protected]>
Hi

Thanks for your reports. I'll look into them.

But could you please add them to our bugtracker at

http://bugs.bitflux.ch/browse/BXE

other they may get forgotten

thanks

christian

On 14.1.2007 20:21 Uhr, Jean Jordaan wrote:
> Hi again
> 
>> I don't know if this is the best way, and there may be other vulnerable
>> spots in BXE.
> 
> I think I've just found another one. In 'mozile/domlevel3.js'
> 
> function documentSaveXML(snode)
> {
> 	[...]
> 	for(var i in ns ) {
> 		if (i == "xmlns") {
> 			snode.setAttributeNS(XMLNS,"xmlns",ns[i]);
> 		} else {
> 			snode.setAttributeNS(XMLNS,"xmlns:" + i , ns[i]);
> 		}
> 	}
> 
> Breaks with 'snode.setAttributeNS' undefined, and 'i' equal to
> 'contains', the name of one of the functions that kupu puts on
> Array.prototype
> No breakage without the kupu code. So the previous fix is not sufficient ..
> 

-- 
christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich
phone +41 44 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71
http://www.bitflux.ch | [email protected] |  GPG 0x5CE1DECB
-- 
bx-editor-users mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bx-editor-users