FS#148 - Middle clicking a link truncates the SELECTED_URI for the new window.
Attached to Project:
Uzbl
Opened by Michael Fiano (axion) - 2009-12-10 07:40:50 PM
Last edited by Brendan Taylor (bct) - 2010-11-22 06:45:04 PM
Opened by Michael Fiano (axion) - 2009-12-10 07:40:50 PM
Last edited by Brendan Taylor (bct) - 2010-11-22 06:45:04 PM
|
DetailsMiddle clicking a link truncates the SELECTED_URI for the new window. A "&" character and anything after it, will not be passed to the URI for the new window, causing a 404 error, or a completely different page than expected. This problem does not occur with webkit's builtin for opening a link in a new window, when right clicking and picking "Open Link In New Window". This is specific to middle clicking links with the examples in the uzbl example config:
set load_from_xclip = sh 'echo "uri $(xclip -o)" > $4' set open_new_window = sh 'uzbl-browser -u \@SELECTED_URI' @bind <Button2> = @jsh if(get("SELECTED_URI")) { run("\@open_new_window"); } else { run("\\\@load_from_xclip"); } This can be reproduced by middle clicking one of your bookmark links on http://www.google.com/bookmarks |
This task depends upon
Comment by Paweł Zuzelski (pawelz) -
2010-08-02 09:53:16 PM
This is CRITICAL SECURITY ISSUE. It allows arbitrary command execution. Visit http://rozpalona.asia/uzbl_killer.html for an example
Comment by Brendan Taylor (bct) -
2010-11-22 06:44:54 PM
This was fixed in 8fbe72, which also fixed #240