rnhmjoj/qutebrowser
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
8e6aa9e3e1
qutebrowser/tests/end2end/features
History
Florian Bruhin 43e58ac865 CVE-2018-10895: Fix CSRF issues with qute://settings/set URL 
In ffc29ee043 (part of v1.0.0), a
qute://settings/set URL was added to change settings.

Contrary to what I apparently believed at the time, it *is* possible for
websites to access `qute://*` URLs (i.e., neither QtWebKit nor QtWebEngine
prohibit such requests, other than the usual cross-origin rules).

In other words, this means a website can e.g. have an `<img>` tag which loads a
`qute://settings/set` URL, which then sets `editor.command` to a bash script.
The result of that is arbitrary code execution.

Fixes #4060
See #2332
2018-07-11 17:05:23 +02:00
..
backforward.feature Add a modeline to all the *.feature files 2017-03-31 16:16:31 +01:00
caret.feature Press enter to follow links instead of using js 2018-06-09 15:42:44 -07:00
completion.feature Fix wrong 'When' in bdd file 2017-10-26 09:47:02 +02:00
conftest.py Only use OS-specific line separator for hints 2018-06-10 17:21:31 +02:00
downloads.feature Don't run test with failed download on Qt 5.11 2018-06-06 21:12:23 +02:00
editor.feature Preserve a backup if editor callback fails. 2018-03-12 08:34:50 -04:00
hints.feature Skip invalid links on any Qt 5.11 version 2018-07-02 22:32:59 +02:00
history.feature Stabilize URL escaping test 2018-07-03 10:29:28 +02:00
invoke.feature Merge :tab-detach with :tab-give 2017-10-11 17:18:12 +11:00
javascript.feature Skip JS test which is too flaky 2018-07-03 14:15:08 +02:00
keyinput.feature Skip key forwarding tests on Qt 5.11.1 2018-07-02 23:19:57 +02:00
marks.feature Skip fragment test 2018-02-08 20:23:34 +01:00
misc.feature Fix broken tests 2018-06-11 18:38:22 +02:00
navigate.feature Stabilize navigate.feature on Qt 5.11 2018-03-23 10:29:25 +01:00
open.feature Bring back searchengine BDD tests 2017-07-04 15:39:07 +02:00
private.feature Drop legacy QtWebKit support 2017-09-18 23:01:17 +02:00
prompts.feature Remove old deprecated commands 2017-10-17 10:44:22 +02:00
qutescheme.feature CVE-2018-10895: Fix CSRF issues with qute://settings/set URL 2018-07-11 17:05:23 +02:00
scroll.feature Skip another scroll test with Qt 5.10 and Travis 2018-02-10 20:15:17 +01:00
search.feature Update tests for new implementation 2018-04-16 23:28:32 -04:00
sessions.feature use self.delete and add test 2018-01-19 09:29:37 +01:00
spawn.feature Stabilize :spawn with userscript tests 2017-11-22 08:43:47 +01:00
tabs.feature Refocus command prompt after a new tab is opened when in command mode 2018-05-11 08:49:13 -07:00
test_backforward_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_caret_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_completion_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_downloads_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_editor_bdd.py Try to stabilize editor end2end test 2018-02-08 20:21:25 +01:00
test_hints_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_history_bdd.py Don't escape URLs for qute://history 2018-06-23 14:27:07 +02:00
test_invoke_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_javascript_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_keyinput_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_marks_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_misc_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_navigate_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_open_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_private_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_prompts_bdd.py Adjust SSL test for Qt 5.11 2018-07-02 23:15:04 +02:00
test_qutescheme_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_scroll_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_search_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_sessions_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_spawn_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_tabs_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_urlmarks_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_utilcmds_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_yankpaste_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
test_zoom_bdd.py Update copyright years 2018-02-05 12:19:50 +01:00
urlmarks.feature Avoid more about:blank loads 2017-11-22 10:15:18 +01:00
utilcmds.feature Various spelling fixes 2018-02-04 21:30:59 +01:00
yankpaste.feature Refactor JS log handling and use a dict for javascript.log 2017-09-14 00:37:01 +02:00
zoom.feature Improved zoom level management and enforcement 2017-10-06 20:30:06 -04:00