summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
author Eric Hameleers <alien@slackware.com>2018-12-09 23:44:44 +0100
committer Eric Hameleers <alien@slackware.com>2018-12-09 23:44:44 +0100
commit65637cf9e27768a215a11201273830523da90d19 (patch)
treeebedd1ff98a2d8cb75a58b9f47d2fccf467a2a92
parent73606b3ca4fe428853caa74553563c006a95429a (diff)
downloadktown-65637cf9e27768a215a11201273830523da90d19.tar.gz
ktown-65637cf9e27768a215a11201273830523da90d19.tar.xz
Don't ask... this patch works, the first version did not apply
-rw-r--r--kde/patch/messagelib/messagelib_CVE-2018-19516.patch18
1 files changed, 5 insertions, 13 deletions
diff --git a/kde/patch/messagelib/messagelib_CVE-2018-19516.patch b/kde/patch/messagelib/messagelib_CVE-2018-19516.patch
index fc44974..599dd39 100644
--- a/kde/patch/messagelib/messagelib_CVE-2018-19516.patch
+++ b/kde/patch/messagelib/messagelib_CVE-2018-19516.patch
@@ -3,18 +3,13 @@ From: Laurent Montel <montel@kde.org>
Date: Fri, 23 Nov 2018 07:37:02 +0100
Subject: Exclude Refresh from MetaData (Not necessary)
----
- messageviewer/src/messagepartthemes/default/defaultrenderer.cpp | 5 +++++
- 1 file changed, 5 insertions(+)
-
-diff --git a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp
-index 15ffe44..07de293 100644
---- a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp
-+++ b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp
-@@ -308,6 +308,11 @@ QString processHtml(const QString &htmlSource, QString &extraHead)
+diff -uar messagelib-18.08.3.orig/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp messagelib-18.08.3/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp
+--- messagelib-18.08.3.orig/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp 2018-10-31 07:56:07.000000000 +0100
++++ messagelib-18.08.3/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp 2018-12-09 23:38:11.009130622 +0100
+@@ -308,6 +308,11 @@
return htmlSource;
}
- extraHead = s.mid(startIndex + 6, endIndex - startIndex - 6);
+ extraHead = s.mid(startIndex + 6 , endIndex - startIndex - 6);
+ //Don't authorize to refresh content.
+ if (s.contains(QStringLiteral("http-equiv=\"REFRESH\""), Qt::CaseInsensitive)) {
+ extraHead.clear();
@@ -23,6 +18,3 @@ index 15ffe44..07de293 100644
s = s.mid(endIndex + 7).trimmed();
}
---
-cgit v0.11.2
-