Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 9bb8fdfc34571f35695a3510d84fac8bebde1ecf
https://github.com/WebKit/WebKit/commit/9bb8fdfc34571f35695a3510d84fac8bebde1ecf
Author: Ling Ho <[email protected]>
Date: 2026-06-30 (Tue, 30 Jun 2026)
Changed paths:
M Websites/bugs.webkit.org/PrettyPatch/PrettyPatch.rb
Log Message:
-----------
PrettyPatch should HTML-escape image URLs when rendering binary image diffs
https://bugs.webkit.org/show_bug.cgi?id=317806
rdar://180321002
Reviewed by Stephanie Lewis.
When rendering binary image diffs in the legacy SVN format, PrettyPatch
interpolated the image URL into the generated markup without escaping it,
unlike the equivalent handling elsewhere. Escape the value before it is
emitted so untrusted content cannot affect the surrounding HTML.
* Websites/bugs.webkit.org/PrettyPatch/PrettyPatch.rb:
Canonical link: https://commits.webkit.org/316177@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
