Fix Bug 1005674 - The Flash video player allows cross-site includes due to a missing source check

This commit is contained in:
Kohei Yoshino 2014-05-06 06:26:02 -04:00
Родитель be7b8ae02d
Коммит 74db552da5
1 изменённых файлов: 4 добавлений и 0 удалений

Просмотреть файл

@ -727,3 +727,7 @@ RewriteRule ^/(\w{2,3}(?:-\w{2})?/)?firefox/technology(/?)$ https://developer.mo
# Bug 920212
RewriteRule ^/(\w{2,3}(?:-\w{2})?/)?firefox/fx(/?)$ /$1firefox/new/ [L,R=301]
# Bug 1005674
RewriteCond %{QUERY_STRING} !^flv=(?:https?://videos\.(?:mozilla\.org|cdn\.mozilla\.net))?/\w+/
RewriteRule ^/media/flash/playerWithControls.swf - [F]