From 09b4735659156961621663ed65b9175e69a7f3f2 Mon Sep 17 00:00:00 2001
From: Byron Jones <glob@mozilla.com>
Date: Thu, 2 Jul 2015 15:17:37 +1000
Subject: Bug 1171758: Persistent xss is possible on Firefox

---
 template/en/default/bug/edit.html.tmpl | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

(limited to 'template/en/default/bug')

diff --git a/template/en/default/bug/edit.html.tmpl b/template/en/default/bug/edit.html.tmpl
index eba5702e3..93c137073 100644
--- a/template/en/default/bug/edit.html.tmpl
+++ b/template/en/default/bug/edit.html.tmpl
@@ -600,12 +600,16 @@
       [% IF bug.check_can_change_field("bug_file_loc", 0, 1) %]
         <span id="bz_url_edit_container" class="bz_default_hidden"> 
           <a href="[% bug.bug_file_loc FILTER html %]" target="_blank"
-             rel="noreferrer" title="[% bug.bug_file_loc FILTER html %]"
-             [% IF NOT is_safe_url(bug.bug_file_loc) %]
-               onclick="return confirm(
-                 'This is considered an unsafe URL and could possibly be harmful. '
-                  + 'The full URL is:\n\n[% bug.bug_file_loc FILTER js FILTER html %]\n\n'
-                  + 'Continue?')"
+            rel="noreferrer" title="[% bug.bug_file_loc FILTER html %]"
+            [% IF NOT is_safe_url(bug.bug_file_loc) %]
+              onclick="
+                try {
+                  return confirm('This is considered an unsafe URL and could possibly be harmful. ' +
+                    'The full URL is:\n\n[% bug.bug_file_loc FILTER js FILTER html %]\n\nContinue?');
+                } catch(e) {
+                  return false;
+                }
+              "
              [% END %]>
           [% bug.bug_file_loc FILTER truncate(40) FILTER html %]</a>
           (<a href="#" id="bz_url_edit_action">edit</a>)
-- 
cgit v1.2.3-24-g4f1b