Revision 5caef5d...

Go back to digest for 5th August 2012

Security in KDE Base

Dawit Alemayehu committed changes in [kde-baseapps] /src:

Fix a long standing security issue with the hiding of Konqueror's location (address)
bar through javascript.

This commit changes how a request to create a new window with all its toolbars hidden
is handled. Namely, the toolbar that contains the address input widget will no longer
be hidden by default. The user can explicitly enable the ability to hide the location
bar by adding the following config option to Konqueror's config file (konquerorrc):

[DisableWindowOpenFeatures]
LocationBar=false

REVIEW: 105749

File Changes

Modified 2 files
  • /src
  •   konqueror/konqmainwindow.cpp
  •   konqueror/konqmainwindow.h
2 files changed in total