mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-12-07 21:59:54 +00:00
69cede4a0f
Disallow calling `StringBase::bytes()` on temporaries to avoid returning `ReadonlyBytes` that outlive the underlying string. With this change, we catch a real UAF: `load_result.data = maybe_response.release_value().bytes();` All other updated call sites were already safe, they just needed to use an intermediate named variable to satisfy the new lvalue-only requirement. |
||
|---|---|---|
| .. | ||
| AbstractOperations.cpp | ||
| AbstractOperations.h | ||
| ReferrerPolicy.cpp | ||
| ReferrerPolicy.h | ||