Stowage/ladybird
2
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-12-07 21:59:54 +00:00
Code Issues Projects Releases Packages Wiki Activity
ladybird/Libraries/LibWeb/XHR
History
Aliaksandr Kalenik 69cede4a0f AK+LibWeb: Make StringBase::bytes() lvalue-only 
Disallow calling `StringBase::bytes()` on temporaries to avoid returning
`ReadonlyBytes` that outlive the underlying string.

With this change, we catch a real UAF:
`load_result.data = maybe_response.release_value().bytes();`
All other updated call sites were already safe, they just needed to use
an intermediate named variable to satisfy the new lvalue-only
requirement.
2025-11-25 13:02:20 -05:00
..
EventNames.cpp LibWeb: Remove the initialize_strings methods 2025-01-12 00:35:58 +01:00
EventNames.h LibWeb: Remove the initialize_strings methods 2025-01-12 00:35:58 +01:00
FormData.cpp LibWeb: Replace usages of dynamic_cast with as and as_if 2025-08-22 20:26:09 +02:00
FormData.h LibWeb: Implement formData() for "multipart/form-data" 2025-01-20 23:33:51 +00:00
FormData.idl LibWeb: Update FormData constructor to reflect the spec 2024-12-25 14:52:57 +00:00
FormDataEntry.h LibGC+Everywhere: Factor out a LibGC from LibJS 2024-11-15 14:49:20 +01:00
FormDataIterator.cpp LibWeb: Only set prototype once for object with IDL interface 2025-04-20 18:43:11 +02:00
FormDataIterator.h LibGC+Everywhere: Factor out a LibGC from LibJS 2024-11-15 14:49:20 +01:00
ProgressEvent.cpp LibWeb: Only set prototype once for object with IDL interface 2025-04-20 18:43:11 +02:00
ProgressEvent.h LibWeb: Use double type in ProgressEvent 2025-04-17 08:28:47 -04:00
ProgressEvent.idl LibWeb: Use double type in ProgressEvent 2025-04-17 08:28:47 -04:00
XMLHttpRequest.cpp AK+LibWeb: Make StringBase::bytes() lvalue-only 2025-11-25 13:02:20 -05:00
XMLHttpRequest.h LibWeb/XHR: Isomorphic decode accessing XMLHttpRequest response headers 2025-01-15 12:35:56 +00:00
XMLHttpRequest.idl LibWeb: Don't expose XMLHttpRequest.responseXML in workers 2025-07-01 01:03:58 +02:00
XMLHttpRequestEventTarget.cpp Everywhere: Hoist the Libraries folder to the top-level 2024-11-10 12:50:45 +01:00
XMLHttpRequestEventTarget.h Everywhere: Run clang-format 2024-12-28 05:39:32 -08:00
XMLHttpRequestEventTarget.idl Everywhere: Hoist the Libraries folder to the top-level 2024-11-10 12:50:45 +01:00
XMLHttpRequestUpload.cpp LibWeb: Only set prototype once for object with IDL interface 2025-04-20 18:43:11 +02:00
XMLHttpRequestUpload.h LibGC+Everywhere: Factor out a LibGC from LibJS 2024-11-15 14:49:20 +01:00
XMLHttpRequestUpload.idl Everywhere: Hoist the Libraries folder to the top-level 2024-11-10 12:50:45 +01:00