Firefox · DOM
CVE-2026-12316
Logic Error in DOM
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/security/sanitizer/Sanitizer.cpp
Patch
diff --git a/dom/security/sanitizer/Sanitizer.cpp b/dom/security/sanitizer/Sanitizer.cpp
index 8fc0804a7a0..4e120a8d8fd 100644
--- a/dom/security/sanitizer/Sanitizer.cpp
+++ b/dom/security/sanitizer/Sanitizer.cpp
@@ -1650,7 +1650,7 @@ static bool RemoveJavascriptNavigationURLAttribute(Element* aElement,
return false;
}
- return value.EqualsLiteral("href") || value.EqualsLiteral("xlink:href");
+ return value.EqualsLiteral("href") || StringEndsWith(value, u":href"_ns);
}
return false;
Loading diff…
References
On This Page