cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Security fix for CVE-2013-0256, an XSS exploit in RDoc

Browse Source 
ok jeremy@ sthen@
This commit is contained in:
jasper 2013-02-13 18:19:37 +00:00
parent 4764baf432
commit 7ada00f584
2 changed files with 34 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
devel/ruby-rdoc/Makefile
View File

@ -1,10 +1,10 @@
# $OpenBSD: Makefile,v 1.2 2012/09/23 16:57:34 jeremy Exp $
# $OpenBSD: Makefile,v 1.3 2013/02/13 18:19:37 jasper Exp $
COMMENT = generate and display ruby documentation
DISTNAME = rdoc-3.11
REVISION = 0
CATEGORIES = devel
REVISION = 1
CATEGORIES = devel
HOMEPAGE = http://docs.seattlerb.org/rdoc/

31
devel/ruby-rdoc/patches/patch-lib_rdoc_generator_template_darkfish_js_darkfish_js Normal file
View File

@ -0,0 +1,31 @@
$OpenBSD: patch-lib_rdoc_generator_template_darkfish_js_darkfish_js,v 1.1 2013/02/13 18:19:37 jasper Exp $
Fix CVE-2013-0256, an XSS exploit in RDoc
From upstream git:
https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60
--- lib/rdoc/generator/template/darkfish/js/darkfish.js.orig Wed Feb 13 16:20:53 2013
+++ lib/rdoc/generator/template/darkfish/js/darkfish.js Wed Feb 13 16:21:41 2013
@@ -109,13 +109,15 @@ function hookSearch() {
function highlightTarget( anchor ) {
console.debug( "Highlighting target '%s'.", anchor );
- $("a[name=" + anchor + "]").each( function() {
- if ( !$(this).parent().parent().hasClass('target-section') ) {
- console.debug( "Wrapping the target-section" );
- $('div.method-detail').unwrap( 'div.target-section' );
- $(this).parent().wrap( '<div class="target-section"></div>' );
- } else {
- console.debug( "Already wrapped." );
+ $("a[name]").each( function() {
+ if ( $(this).attr("name") == anchor ) {
+ if ( !$(this).parent().parent().hasClass('target-section') ) {
+ console.debug( "Wrapping the target-section" );
+ $('div.method-detail').unwrap( 'div.target-section' );
+ $(this).parent().wrap( '<div class="target-section"></div>' );
+ } else {
+ console.debug( "Already wrapped." );
+ }
}
});
};