public/browser
1
0
Fork 0
mirror of https://github.com/lightpanda-io/browser.git synced 2026-02-04 14:33:47 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

Try to protect against invalid use of document.write

Browse Source 
Specifically, try to block multiple document.write which, when combined, have
multiple html documents.
This commit is contained in:
Karl Seguin
2025-12-30 10:07:56 +08:00
parent 169582c992
commit 7c7240d5ab
4 changed files with 55 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
src/html5ever/lib.rs
View File

@@ -266,25 +266,32 @@ pub extern "C" fn html5ever_streaming_parser_feed(
parser_ptr: *mut c_void,
html: *const c_uchar,
len: usize,
) {
) -> i32 {
if parser_ptr.is_null() || html.is_null() || len == 0 {
return;
return 0;
}
let streaming_parser = unsafe { &mut *(parser_ptr as *mut StreamingParser) };
let bytes = unsafe { std::slice::from_raw_parts(html, len) };
let result = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
let streaming_parser = unsafe { &mut *(parser_ptr as *mut StreamingParser) };
let bytes = unsafe { std::slice::from_raw_parts(html, len) };
// Convert bytes to UTF-8 string
if let Ok(s) = std::str::from_utf8(bytes) {
let tendril = StrTendril::from(s);
// Convert bytes to UTF-8 string
if let Ok(s) = std::str::from_utf8(bytes) {
let tendril = StrTendril::from(s);
// Feed the chunk to the parser
// The Parser implements TendrilSink, so we can call process() on it
let parser = streaming_parser.parser
.downcast_mut::<Parser<sink::Sink>>()
.expect("Invalid parser type");
// Feed the chunk to the parser
// The Parser implements TendrilSink, so we can call process() on it
let parser = streaming_parser.parser
.downcast_mut::<Parser<sink::Sink>>()
.expect("Invalid parser type");
parser.process(tendril);
parser.process(tendril);
}
}));
match result {
Ok(_) => 0, // Success
Err(_) => -1, // Panic occurred
}
}