My favorites
|
Sign in
google-caja
A source-to-source translator for securing Javascript-based web content
Project Home
Downloads
Wiki
Issues
Source
Checkout
|
Browse
|
Changes
|
3901 - 3877 of 3901
Older
›
Committed Changes
Rev
Scores
Commit log message
Date
Author
r3901
A applet-free testbed http://codereview.appspot.com/116069 A caja testbed that uses the cajoling service instead of an applet to perform the cajoling. (See http://10.latest.caja.appspot.com for an example of it running). * Adds a series of examples of the attacks caja prevents and interactions it supports * Adds gwt libraries needed to use the front-end during development * The changes to Normalizer are needed to handle the varing availability of java's Normalizer depending on the version of Ja
Today (12 minutes ago)
jasvir
r3900
bad html attributes downgraded to a warning http://codereview.appspot.com/164070 Prior to r3844, html with an invalid attr like <div title='bob's foo'> would have the bad "foo'" attribute deleted with a warning. r3844 changed that to be a fatal error. Bad attributes are unfortunately common, for many reasons. Usually because they're typos of some sort. This CL downgrades the error to a warning. R=mikesamuel@gmail.com
Today (8 hours ago)
felix8a
r3899
Issue 1165: fixed testCustomEvent on opera http://codereview.appspot.com/167059 Opera supports both addEventListener and attachEvent but events created using the DOM standard mechanism can only be dispatched to listeners added using addEventListener. R=felix8a@gmail.com
Today (9 hours ago)
mikesamuel
r3898
Issue 1174 - <button>.cloneNode fails on IE http://codereview.appspot.com/165098 http://code.google.com/p/google-caja/issues/detail?id=1174 ie[67] doesn't let you change a button's type after it's created. it's the same as the <input> type problem, you have to specify the type in createElement. bridal's cloneNode handles <input> correctly but not <button. This change fixes constructClone in bridal.js. I also checked html4-attributes-defs.json to see whether there are any other nodes with a
Today (9 hours ago)
mikesamuel
r3897
Fix issue 1176: ant demos fails with ANT error http://codereview.appspot.com/167054 http://code.google.com/p/google-caja/issues/detail?id=1176 > What steps will reproduce the problem? 1. Checkout using svn (or git-svn) 2. (cd caja && ant demos) > What do you see instead? BUILD FAILED /opt/svn/google-caja/build.xml:1121: transform doesn't support the nested "include" element. R=metaweta@gmail.com
Yesterday (31 hours ago)
mikesamuel
r3896
Fixes issue 1154, selectEl.options.selectedIndex. http://codereview.appspot.com/166045 Exposes the selectedIndex property on an options nodelist. R=jasvir@gmail.com
Yesterday (31 hours ago)
metaweta
r3895
Edited wiki page through web user interface.
Dec 04 (5 days ago)
mikesamuel
r3894
Created wiki page through web user interface.
Dec 04 (5 days ago)
mikesamuel
r3893
Edited wiki page through web user interface.
Dec 04 (5 days ago)
mikesamuel
r3892
Unpack HTML Parser source into third_party/java/htmlparser http://codereview.appspot.com/166051 This is a prerequisite to being able to modify the source to let us upgrade to a modern version of libhtmlparser. This is the unmodified source for revision 1.2.1. R=jasvir
Dec 04 (5 days ago)
mikesamuel
r3891
Fix toInt32 and toUint32 around NaN and Infinity http://codereview.appspot.com/157109 Operation.fold depended on a faulty implementation of toInt32 and toUint32. R=davidsarah.hopwood@gmail.com, metaweta@gmail.com
Dec 04 (5 days ago)
mikesamuel
r3890
Push latest maven version to shindig. Not a release version out of an abundance of caution. Includes: * DomParser updates to accommodate improved fragment parsing and ability to retain comments (main motivator: for Shindig) * minimizing CSS printer * jsdoc NaN handling fixes
Dec 03 (6 days ago)
johnfargo
r3889
1. Adds ability to override the DOMImplementation used to create a Document in DomParser. 2. Makes it possible to retain comments when parsing HTML. 3. Retains full document structure when String whose first tag is <html> is parsed as a fragment (doesn't cull out presumed artificial nodes). This change does not add comment serialization to Nodes.render(...), by request. These changes are designed to accommodate Shindig's HTML parsing needs, while maintaining Caja's existing behavior/demands
Dec 03 (6 days ago)
johnfargo
r3888
warning cleanup in ancillary tools
Dec 03 (6 days ago)
mikesamuel
r3887
fixed optimizer to recurse into return values, and const local optimizer to be careful about inlining long strings
Dec 03 (6 days ago)
mikesamuel
r3886
Fix symbolic links that didn't add as symbolic in ancillary servlet files and fix error reporting in StaticFiles
Dec 03 (6 days ago)
mikesamuel
r3885
Small change in the cajoling service api to allow the uri policy to be set http://codereview.appspot.com/141042 Changes CajolingService to take a UriCallback object which rewrites uris R=metaweta@gmail.com
Dec 02, 2009
jasvir
r3884
Edited wiki page through web user interface.
Dec 01, 2009
erights
r3883
{{{Object.getPrototypeOf()}}} is read-only
Dec 01, 2009
davidsarah.hopwood
r3882
Make defaults in overrides html4-attributes.json consistent with overridden entries http://codereview.appspot.com/164054 See the overridden version in html4-attributes.json R=jasvir@gmail.com
Dec 01, 2009
mikesamuel
r3881
Edited wiki page through web user interface.
Nov 30, 2009
erights
r3880
Edited wiki page through web user interface.
Nov 30, 2009
erights
r3879
Edited wiki page through web user interface.
Nov 30, 2009
erights
r3878
Edited wiki page through web user interface.
Nov 30, 2009
erights
r3877
first pass at an interactive servlet that exposes the linter, minifier, and jsdoc generator
Nov 30, 2009
mikesamuel
3901 - 3877 of 3901
Older
›