From 5ea0bf34e404735d62198562a7f7e6cfd0bf4e3b Mon Sep 17 00:00:00 2001
From: "justdave%bugzilla.org" <>
Date: Sat, 15 Jan 2005 12:25:32 +0000
Subject: [PATCH] Bug 276907: Don't linkify javascript: or data: URLs in the
 URL field on a bug. Patch by Gervase Markham <gerv@mozilla.org>, backported
 to 2.16 branch by Myk Melez <myk@mozilla.org> r= justdave,vladd, a= justdave

---
 template/en/default/bug/edit.html.tmpl          | 3 ++-
 template/en/default/bug/show-multiple.html.tmpl | 9 +++++++--
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/template/en/default/bug/edit.html.tmpl b/template/en/default/bug/edit.html.tmpl
index 28effd3614..7fb0199c9d 100644
--- a/template/en/default/bug/edit.html.tmpl
+++ b/template/en/default/bug/edit.html.tmpl
@@ -199,7 +199,8 @@
   <tr>
     <td align="right">
       <b>
-        [% IF bug.bug_file_loc %]
+        [% IF bug.bug_file_loc 
+           AND NOT bug.bug_file_loc.match("^(javascript|data)") %]
           <a href="[% bug.bug_file_loc FILTER html %]">URL</a>:
         [% ELSE %]
           URL:
diff --git a/template/en/default/bug/show-multiple.html.tmpl b/template/en/default/bug/show-multiple.html.tmpl
index 60d23ce059..dcda9fda6f 100644
--- a/template/en/default/bug/show-multiple.html.tmpl
+++ b/template/en/default/bug/show-multiple.html.tmpl
@@ -104,8 +104,13 @@
     <tr>
       <td colspan="4">
         <b>URL:</b>&nbsp;
-        <a href="[% bug.bug_file_loc FILTER html %]">
-                 [% bug.bug_file_loc FILTER html %]</a> 
+        [% IF bug.bug_file_loc 
+           AND NOT bug.bug_file_loc.match("^(javascript|data)") %]
+          <a href="[% bug.bug_file_loc FILTER html %]">
+                   [% bug.bug_file_loc FILTER html %]</a>
+        [% ELSE %]
+          [% bug.bug_file_loc FILTER html %]
+        [% END %]
     </tr>
     
     <tr>
-- 
2.47.2