From 0c92404c31069a71099ec6a4b5dc151d453f6bc5 Mon Sep 17 00:00:00 2001
From: Byron Jones <bjones@mozilla.com>
Date: Wed, 16 Nov 2011 13:40:01 +0800
Subject: Bug 702695: display unsafe-url warning on inline-history urls

---
 .../template/en/default/hook/bug/comments-aftercomments.html.tmpl | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'extensions/InlineHistory/template')

diff --git a/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl b/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
index 261f5b3fd..dffec1d28 100644
--- a/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
+++ b/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
@@ -136,8 +136,12 @@
     [% PROCESS formattimeunit time_unit = value FILTER html FILTER js %]
   [% ELSIF change.buglist %]
     [% value FILTER bug_list_link FILTER js %]
-  [% ELSIF change.fieldname == 'bug_file_loc' ||
-           change.fieldname == 'see_also' %]
+  [% ELSIF change.fieldname == 'bug_file_loc' %]
+    [%~%]<a href="[% value FILTER html FILTER js %]" target="_blank"
+      [%~ ' onclick="return inline_history.confirmUnsafeUrl(this.href)"'
+          UNLESS is_safe_url(value) %]>
+    [%~%][% value FILTER html FILTER js %]</a>
+  [% ELSIF change.fieldname == 'see_also' %]
     [%~%]<a href="[% value FILTER html FILTER js %]" target="_blank">
     [%~%][% value FILTER html FILTER js %]</a>
   [% ELSIF change.fieldname == 'assigned_to' ||
-- 
cgit v1.2.3-24-g4f1b