LibWeb: Limit HTMLImageElement width and height to allowed values

Setting the `width` or `height` properties of `HTMLImageElement` to a
value greater than 2147483647 will now cause the property to be set to
0.
This commit is contained in:
Tim Ledbetter 2024-11-29 15:32:37 +00:00 committed by Tim Ledbetter
commit b05bc71002
Notes: github-actions[bot] 2024-12-01 15:13:03 +00:00
4 changed files with 58 additions and 12 deletions

View file

@ -1,3 +1,23 @@
img.getAttribute("height") after img.setAttribute("height", "0"): 0
img.height after img.setAttribute("height", "0"): 0
img.getAttribute("height") after img.height = 0: 0
img.height after img.height = 0: 0
img.getAttribute("height") after img.setAttribute("height", "1"): 1
img.height after img.setAttribute("height", "1"): 1
img.getAttribute("height") after img.height = 1: 1
img.height after img.height = 1: 1
img.getAttribute("height") after img.setAttribute("height", "2147483647"): 2147483647
img.height after img.setAttribute("height", "2147483647"): 2147483647
img.getAttribute("height") after img.height = 2147483647: 2147483647
img.height after img.height = 2147483647: 2147483647
img.getAttribute("height") after img.setAttribute("height", "2147483648"): 2147483648
img.height after img.setAttribute("height", "2147483648"): 0
img.getAttribute("height") after img.height = 2147483648: 0
img.height after img.height = 2147483648: 0
img.getAttribute("height") after img.setAttribute("height", "4294967295"): 4294967295
img.height after img.setAttribute("height", "4294967295"): 0
img.getAttribute("height") after img.height = 4294967295: 0
img.height after img.height = 4294967295: 0
img.getAttribute("hspace") after img.setAttribute("hspace", "0"): 0
img.hspace after img.setAttribute("hspace", "0"): 0
img.getAttribute("hspace") after img.hspace = 0: 0
@ -18,6 +38,26 @@ img.getAttribute("hspace") after img.setAttribute("hspace", "4294967295"): 42949
img.hspace after img.setAttribute("hspace", "4294967295"): 0
img.getAttribute("hspace") after img.hspace = 4294967295: 0
img.hspace after img.hspace = 4294967295: 0
img.getAttribute("width") after img.setAttribute("width", "0"): 0
img.width after img.setAttribute("width", "0"): 0
img.getAttribute("width") after img.width = 0: 0
img.width after img.width = 0: 0
img.getAttribute("width") after img.setAttribute("width", "1"): 1
img.width after img.setAttribute("width", "1"): 1
img.getAttribute("width") after img.width = 1: 1
img.width after img.width = 1: 1
img.getAttribute("width") after img.setAttribute("width", "2147483647"): 2147483647
img.width after img.setAttribute("width", "2147483647"): 2147483647
img.getAttribute("width") after img.width = 2147483647: 2147483647
img.width after img.width = 2147483647: 2147483647
img.getAttribute("width") after img.setAttribute("width", "2147483648"): 2147483648
img.width after img.setAttribute("width", "2147483648"): 0
img.getAttribute("width") after img.width = 2147483648: 0
img.width after img.width = 2147483648: 0
img.getAttribute("width") after img.setAttribute("width", "4294967295"): 4294967295
img.width after img.setAttribute("width", "4294967295"): 0
img.getAttribute("width") after img.width = 4294967295: 0
img.width after img.width = 4294967295: 0
input.getAttribute("size") after input.setAttribute("size", "0"): 0
input.size after input.setAttribute("size", "0"): 20
input.size = 0 threw exception of type IndexSizeError