diff options
| author | Michal Klocek <michal.klocek@qt.io> | 2018-03-16 05:33:23 +0000 |
|---|---|---|
| committer | Michal Klocek <michal.klocek@qt.io> | 2018-06-06 12:44:11 +0000 |
| commit | fa38dc29054d6895758bcc75e031a89597f3aaf6 (patch) | |
| tree | a3081fc7fc76c2f6dd2038faa35c3ac6302462d6 /chromium/third_party/webrtc/modules/audio_coding/codecs/isac/main/source/isac.c | |
| parent | df086394e015eca4bcaaac71a3da87837d9b8988 (diff) | |
[Backport] CVE-2018-6145
HTML parser: Fix "HTML integration point" implementation in HTMLTreeBuilderSimulator.
HTMLTreeBuilderSimulator assumed only <foreignObject> as an HTML
integration point. This CL adds <annotation-xml>, <desc>, and SVG
<title>.
Bug: 805924
Reviewed-on: https://chromium-review.googlesource.com/964038
Change-Id: If99f8fdeb9b2b594925f04491d004709d8f774ad
Reviewed-by: Kai Koehne <kai.koehne@qt.io>
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Diffstat (limited to 'chromium/third_party/webrtc/modules/audio_coding/codecs/isac/main/source/isac.c')
0 files changed, 0 insertions, 0 deletions