From f796cf6076ca7c08882c863c3d07774aedcda34a Mon Sep 17 00:00:00 2001
From: "justdave%bugzilla.org" <>
Date: Sat, 15 Jan 2005 12:22:17 +0000
Subject: Bug 276907: Don't linkify javascript: or data: URLs in the URL field
 on a bug. Patch by Gervase Markham <gerv@mozilla.org> r= justdave,vladd, a=
 justdave

---
 template/en/default/bug/edit.html.tmpl          | 3 ++-
 template/en/default/bug/show-multiple.html.tmpl | 9 +++++++--
 2 files changed, 9 insertions(+), 3 deletions(-)

(limited to 'template/en/default')

diff --git a/template/en/default/bug/edit.html.tmpl b/template/en/default/bug/edit.html.tmpl
index 94334066d..3a9fed0c7 100644
--- a/template/en/default/bug/edit.html.tmpl
+++ b/template/en/default/bug/edit.html.tmpl
@@ -301,7 +301,8 @@
   <tr>
     <td align="right">
       <b>
-        [% IF bug.bug_file_loc %]
+        [% IF bug.bug_file_loc 
+           AND NOT bug.bug_file_loc.match("^(javascript|data)") %]
           <a href="[% bug.bug_file_loc FILTER html %]"><u>U</u>RL</a>:
         [% ELSE %]
           <u>U</u>RL:
diff --git a/template/en/default/bug/show-multiple.html.tmpl b/template/en/default/bug/show-multiple.html.tmpl
index a985fccb4..a6c5fccea 100644
--- a/template/en/default/bug/show-multiple.html.tmpl
+++ b/template/en/default/bug/show-multiple.html.tmpl
@@ -116,8 +116,13 @@
     <tr>
       <td colspan="4">
         <b>URL:</b>&nbsp;
-        <a href="[% bug.bug_file_loc FILTER html %]">
-                 [% bug.bug_file_loc FILTER html %]</a>
+        [% IF bug.bug_file_loc 
+           AND NOT bug.bug_file_loc.match("^(javascript|data)") %]
+          <a href="[% bug.bug_file_loc FILTER html %]">
+                   [% bug.bug_file_loc FILTER html %]</a>
+        [% ELSE %]
+          [% bug.bug_file_loc FILTER html %]
+        [% END %]
     </tr>
 
     <tr>
-- 
cgit v1.2.3-24-g4f1b