RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-06-01 07:48:12 +00:00
Code Issues Activity Actions

LibWeb: Check if scripting is disabled before running script

Browse source 
This is not a full check, it's just enough to prevent script execution
in DOMParser.
This commit is contained in:
Luke 2021-07-05 03:59:47 +01:00 • committed by Andreas Kling
parent ce314c54bd
commit 0ea50d44bf
3 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Userland/Libraries/LibWeb/DOM/Node.cpp
View file

@ -637,4 +637,11 @@ void Node::serialize_tree_as_json(JsonObjectSerializer<StringBuilder>& object) c
}
}
// https://html.spec.whatwg.org/multipage/webappapis.html#concept-n-noscript
bool Node::is_scripting_disabled() const
{
// FIXME: or when scripting is disabled for its relevant settings object.
return !document().browsing_context();
}
}

2
Userland/Libraries/LibWeb/DOM/Node.h
View file

@ -163,6 +163,8 @@ public:
bool is_host_including_inclusive_ancestor_of(const Node&) const;
bool is_scripting_disabled() const;
// Used for dumping the DOM Tree
void serialize_tree_as_json(JsonObjectSerializer<StringBuilder>&) const;