Reviewers: felix8a,
Description:
Backport security patch
r5630 Reject, in the mitigator, JS reserved names written with escapes
together with preceding related changes
r5626 Update third_party/js/{acorn,escodegen}.
r5627 Remove redundant parent node tracking from mitigateSrcGotchas.
The merge command was
svn merge -c 5626,5627,5630 https://google-caja.googlecode.com/svn/trunk
and there were no conflicts.
Please review this at https://codereview.appspot.com/30490043/
Affected files (+1131, -703 lines):
M .
MM build.xml
M src/com/google/caja/ses/createExports.js
M src/com/google/caja/ses/exportsToSES.js
M src/com/google/caja/ses/mitigateGotchas.js
M tests/com/google/caja/ses/ses-tests.json
M tests/com/google/caja/ses/test-ses-mitigation.html
M tests/com/google/caja/ses/test-ses-mitigation.js
M third_party
M third_party/js/acorn/acorn.js
M third_party/js/escodegen/escodegen.js
M third_party/js/escodegen/estraverse.js
--
---
You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
