mozjs78/backport-CVE-2023-23599.patch
Jiayi Yin ebbb360b11 init
2025-03-17 06:18:47 +00:00

43 lines
1.4 KiB
Diff

From fd34a58ac999727dde9fbe909953e1a9b5e34b04 Mon Sep 17 00:00:00 2001
From: s30028044 <sunhai10@huawei.com>
Date: Mon, 8 Apr 2024 19:41:26 +0800
Subject: [PATCH] CVE-2023-23599
---
devtools/client/netmonitor/test/browser_net_curl-utils.js | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/devtools/client/netmonitor/test/browser_net_curl-utils.js b/devtools/client/netmonitor/test/browser_net_curl-utils.js
index dbca31b..5258f5c 100644
--- a/devtools/client/netmonitor/test/browser_net_curl-utils.js
+++ b/devtools/client/netmonitor/test/browser_net_curl-utils.js
@@ -307,10 +307,10 @@ function testEscapeStringWin() {
"Double quotes should be escaped."
);
- const percentSigns = "%AppData%";
+ const percentSigns = "%TEMP% %@foo% %2XX% %_XX% %?XX%";
is(
CurlUtils.escapeStringWin(percentSigns),
- '""%"AppData"%""',
+ '"^%^TEMP^% ^%^@foo^% ^%^2XX^% ^%^_XX^% ^%?XX^%"',
"Percent signs should be escaped."
);
@@ -321,10 +321,10 @@ function testEscapeStringWin() {
"Backslashes should be escaped."
);
- const newLines = "line1\r\nline2\r\nline3";
+ const newLines = "line1\r\nline2\r\rline3\n\nline4";
is(
CurlUtils.escapeStringWin(newLines),
- '"line1"^\u000d\u000A\u000d\u000A"line2"^\u000d\u000A\u000d\u000A"line3"',
+ '"line1"^\r\n\r\n"line2"^\r\n\r\n""^\r\n\r\n"line3"^\r\n\r\n""^\r\n\r\n"line4"',
"Newlines should be escaped."
);
}
--
2.27.0