Security/Reviews/Gaia/DownloadManager: Difference between revisions

Security/Reviews/Gaia/DownloadManager (view source)

No change in size , 30 January 2014

Confirmed users

353

edits

@@ Line 110: / Line 110: @@
 Based on source code inspection, there are no dangerous coding practices (like misuse of innerHTML) that will result in HTML/JS injections.
-Characters &#39;,&quot;,&gt;, and &gt; were tested in filenames. We could not directly test &gt; or &lt; because the filesystem disallowed those characters in filenames, however we did use App Manager to break into the JS and insert those characters to see if places the filenames are rendered were safe.
+Characters &#39;,&quot;,&gt;, and &lt; were tested in filenames. We could not directly test &gt; or &lt; because the filesystem disallowed those characters in filenames, however we did use App Manager to break into the JS and insert those characters to see if places the filenames are rendered were safe.
 ==== Secure Communications ====