ubuntu-apps-bugs team mailing list archive

[Olivier Tilloy <olivier.tilloy@xxxxxxxxxxxxx>]

** Changed in: webbrowser-app
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Apps bug tracking, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1240685

Title:
  Webapps URL patterns are too laxed

Status in Web Browser App:
  Fix Released
Status in “webbrowser-app” package in Ubuntu:
  Fix Released

Bug description:
  Here:

  http://bazaar.launchpad.net/~phablet-team/webbrowser-
  app/trunk/view/head:/src/app/webbrowser-app.cpp#L150

  a wildcard in a URL pattern is replaced by [^ ]*

  which then allows URLs like:

  http://bady.guy.com/phishing.ebay.com/

  to go through when patterns like:

  https?://*.ebay.com/*

  are specified.

To manage notifications about this bug go to:
https://bugs.launchpad.net/webbrowser-app/+bug/1240685/+subscriptions