Changeset 14328 in josm for trunk/src/org

Timestamp:

2018-10-14T15:15:50+02:00 (6 years ago)

Author:

Don-vip

Message:

see #14319, see #16838 - update to svgSalamander 1.1.2

File:

• trunk/src/org/openstreetmap/josm/tools/ImageProvider.java (modified) (1 diff)

trunk/src/org/openstreetmap/josm/tools/ImageProvider.java

@@ -1656 +1656 @@
         if (svgUniverse == null) {
             svgUniverse = new SVGUniverse();
+            // CVE-2017-5617: Allow only data scheme (see #14319)
+            svgUniverse.setImageDataInlineOnly(true);
         }
         return svgUniverse;