Uzbl

Tasklist

FS#148 - Middle clicking a link truncates the SELECTED_URI for the new window.

Attached to Project: Uzbl
Opened by Michael Fiano (axion) - 2009-12-10 07:40:50 PM
Last edited by Brendan Taylor (bct) - 2010-11-22 06:45:04 PM
Task Type Bug Report
Category uzbl-core
Status Closed
Assigned To No-one
Operating System All
Severity Low
Priority Normal
Reported Version Development
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Middle clicking a link truncates the SELECTED_URI for the new window. A "&" character and anything after it, will not be passed to the URI for the new window, causing a 404 error, or a completely different page than expected. This problem does not occur with webkit's builtin for opening a link in a new window, when right clicking and picking "Open Link In New Window". This is specific to middle clicking links with the examples in the uzbl example config:

set load_from_xclip = sh 'echo "uri $(xclip -o)" > $4'
set open_new_window = sh 'uzbl-browser -u \@SELECTED_URI'
@bind <Button2> = @jsh if(get("SELECTED_URI")) { run("\@open_new_window"); } else { run("\\\@load_from_xclip"); }

This can be reproduced by middle clicking one of your bookmark links on http://www.google.com/bookmarks
This task depends upon

Closed by  Brendan Taylor (bct)
2010-11-22 06:45:04 PM
Reason for closing:  Fixed
Comment by Paweł Zuzelski (pawelz) - 2010-08-02 09:53:16 PM
This is CRITICAL SECURITY ISSUE. It allows arbitrary command execution. Visit http://rozpalona.asia/uzbl_killer.html for an example
Comment by Brendan Taylor (bct) - 2010-11-22 06:44:54 PM
This was fixed in 8fbe72, which also fixed #240

Loading...