languages/dart-sdk
languages/dart-sdk
1
0
Fork 0
mirror of https://github.com/dart-lang/sdk synced 2024-10-01 17:02:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Link to CVE

Browse source 
Change-Id: I6cc5843715ce3a575b584b89e51426f1798740d8
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/266000
Reviewed-by: Lasse Nielsen <lrn@google.com>
This commit is contained in:
Michael Thomsen 2022-10-27 15:10:25 +00:00
parent b411015395
commit ec39de1aba
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
CHANGELOG.md
View file

@ -245,9 +245,15 @@ This is a patch release that:
#### `dart:core`
- The `Uri` class will parse a backslash in the path or the authority separator
of a URI as a forward slash. This affects the `Uri` constructor's `path`
parameter, and the `Uri.parse` method.
- **Security advisory** [CVE-2022-3095](https://github.com/dart-lang/sdk/security/advisories/GHSA-m9pm-2598-57rj):
There is a auth bypass vulnerability in Dart SDK, specifically `dart:uri` core
library, used to parse and validate URLs. This library is vulnerable to the
backslash-trick wherein backslash is not recognized as equivalent to forward
slash in URLs.
The `Uri` class has been changed to parse a backslash in the path or the
authority separator of a URI as a forward slash. This affects the `Uri`
constructor's `path` parameter, and the `Uri.parse` method.
This change was made to not diverge as much from the browser `URL` behavior.
The Dart `Uri` class is still not an implementation of the same standard
as the browser's `URL` implementation.