Mirrors/servo
1
0
Fork 0
mirror of https://github.com/servo/servo.git synced 2025-08-06 14:10:11 +01:00
Code Issues Projects Releases Packages Wiki Activity

Avoid panics for empty or multibyte image usemap

Browse source
This commit is contained in:
Lucjan Suski 2017-03-21 19:21:09 +01:00
parent c83ac31e71
commit ee310fdc2a
3 changed files with 33 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
components/script/dom/htmlimageelement.rs
View file

@ -422,6 +422,11 @@ impl HTMLImageElement {
}; };
let value = usemap_attr.value(); let value = usemap_attr.value();
if value.len() == 0 || !value.is_char_boundary(1) {
return None
}
let (first, last) = value.split_at(1); let (first, last) = value.split_at(1);
if first != "#" || last.len() == 0 { if first != "#" || last.len() == 0 {

10
tests/wpt/mozilla/meta/MANIFEST.json
View file

@ -12884,6 +12884,12 @@
{} {}
] ]
], ],
"mozilla/htmlimageelement.html": [
[
"/_mozilla/mozilla/htmlimageelement.html",
{}
]
],
"mozilla/htmllabel-activation.html": [ "mozilla/htmllabel-activation.html": [
[ [
"/_mozilla/mozilla/htmllabel-activation.html", "/_mozilla/mozilla/htmllabel-activation.html",
@ -25381,6 +25387,10 @@
"54fe6bbc1a7a35ceb14a3bf33f81ebed55beaf72", "54fe6bbc1a7a35ceb14a3bf33f81ebed55beaf72",
"testharness" "testharness"
], ],
"mozilla/htmlimageelement.html": [
"f1857a8f413f444b34464f0a3bc6b46af13c1a5a",
"testharness"
],
"mozilla/htmllabel-activation.html": [ "mozilla/htmllabel-activation.html": [
"2013b49684d0b861415a2e766d5d260906b1f3fb", "2013b49684d0b861415a2e766d5d260906b1f3fb",
"testharness" "testharness"

18
tests/wpt/mozilla/tests/mozilla/htmlimageelement.html Normal file
View file

@ -0,0 +1,18 @@
<!doctype html>
<meta charset="utf-8">
<title>HTMLImageElement usemap special cases</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<img id="empty" usemap>
<img id="multibyte" usemap=&#x1F4A9;>
<script>
test(function () {
document.querySelector("#empty").dispatchEvent(new Event("click"));
assert_true(true);
}, "Do not panic on empty usemap");
test(function () {
document.querySelector("#multibyte").dispatchEvent(new Event("click"));
assert_true(true);
}, "Do not panic on multibyte usemap");
</script>