RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-19 00:45:08 +00:00
Code Issues Activity Actions

LibWeb: Don't load anything for <iframe> without src attribute

Browse source 
Completing an empty URL string from the document base URL will just
return the document URL, so any document that had an "<iframe>"
would endlessly load itself in recursive iframes.
This commit is contained in:
Andreas Kling 2021-04-17 21:36:37 +02:00
parent c1a0ad764a
commit 5e945c5169
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Userland/Libraries/LibWeb/HTML/HTMLIFrameElement.cpp
View file

@ -66,6 +66,9 @@ void HTMLIFrameElement::load_src(const String& value)
if (!m_content_frame)
return;
if (value.is_null())
return;
auto url = document().complete_url(value);
if (!url.is_valid()) {
dbgln("iframe failed to load URL: Invalid URL: {}", value);