Skip to content
This repository has been archived by the owner. It is now read-only.

window.location setInterval(..., 10ms) can spoof the displayed URL #504

Merged
merged 2 commits into from Oct 19, 2016

Conversation

Projects
None yet
1 participant
@garvankeeley
Copy link
Contributor

commented Oct 18, 2016

Hackerone issue 175958

Cancellation of load (by consecutive window.location = ) needs to reset displayed URL

@garvankeeley

This comment has been minimized.

Copy link
Contributor Author

commented Oct 18, 2016

@jamesmudgett review?

@garvankeeley

This comment has been minimized.

Copy link
Contributor Author

commented Oct 19, 2016

Feel free to continue to review post-landing, I'd like this in for next beta so landing now

@garvankeeley garvankeeley merged commit 0d674ea into master Oct 19, 2016

@garvankeeley garvankeeley deleted the hackerone175958 branch Oct 28, 2016

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
You can’t perform that action at this time.