[Caja] Issue 607 in google-caja: paranoid strategy for client-side setInnerHtml

[codesite-noreply]

Updates:
        Status: Invalid
Comment #2 on issue 607 by mikesamuel: paranoid strategy for client-side  
setInnerHtml
http://code.google.com/p/google-caja/issues/detail?id=607

And it could still cause images to load and thereby trigger content type  
attacks, and
scripts in SVG images.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings