Tue 02 Apr 2013 03:49:41 PM UTC, comment #6:
After I switched to current git build, I found that
this had already reported as bug #31833 and fixed in 6528395c.
The fix seems worked, at least on GNU/Linux system.
This bug should be marked as duplicate.
|
Sat 09 Mar 2013 09:53:09 AM UTC, comment #5:
Added safety for Unix system:
Rationale: to prevent URL from escaping the single quote
According to RFC3986, an apostrophe is a valid URI character,
but most URL didn't use it, and browser sends it as %27.
After changing to this patch, my single-quote breaking test worked
(My GNOME Browser popped up at Apostrophe page on English Wikipedia)
29059:1] 404 DEBUG: get url: target=_blank, URL=http://en.wikipedia.org/wiki/', method=0 (sendVars:0, loadTarget:0, loadVariable:0)
29059:1] 405 NETWORK: getURL: HOSTFD is -1
29059:1] 405 DEBUG: Launching URL: xdg-open 'http://en.wikipedia.org/wiki/%27'
gnash: gnash-0.8.10 (Source)
system: Debian GNU/Linux 5.0 Lenny i386
|
Sat 09 Mar 2013 09:50:55 AM UTC, comment #4:
I've attached an additional test file that tries to break
the single-quoted command line using this code:
getURL("http://en.wikipedia.org/wiki/\'","_blank");
It should open the browser to Apostrophe page on English Wikipedia.
With my current dirty hack it will produce error from the shell,
and may be dangerous if it came as something like "http://en.wikipedia.org/wiki/\' ; ls \'."
(file #27584)
|
Sat 02 Mar 2013 08:41:10 AM UTC, comment #3:
This is a quick, dirty and unsafe hack:
Rationale: re-encoding breaks a valid URL
After patching, my test worked (GNOME Browser popped up)
10796:1] 298 DEBUG: get url: target=_blank, URL=http://www.getgnash.org/, method=0 (sendVars:0, loadTarget:0, loadVariable:0)
10796:1] 298 NETWORK: getURL: HOSTFD is -1
10796:1] 298 DEBUG: Launching URL: xdg-open 'http://www.getgnash.org/'
gnash: gnash-0.8.10 (Source)
system: Debian GNU/Linux 5.0 Lenny i386
|
Sat 02 Mar 2013 08:00:08 AM UTC, comment #2:
The root cause is in movie_root::getURL in libcore/movie_root.cpp
|
Tue 05 Feb 2013 06:08:22 AM UTC, comment #1:
I've attached my test flash file, compiled in MTASC 1.14
using this code:
getURL("http://www.getgnash.org/","_blank");
It worked properly on Macromedia Flash Player 7 (Win32),
and Adobe Flash Player 11 (GNU/Linux).
But broken on Gnash 0.8.10 from the reason above.
(file #27391)
|
Mon 04 Feb 2013 06:18:06 AM UTC, original submission:
I've visited incubatepictures.com homepage with Gnash 0.8.10 standalone.
The page was written entirely in Flash 8.
Aside from text issue in bug #38243, it displayed quite good.
But when I clicked the download link on "Watch the Film" section
of "There's no Tomorrow" film, the browser didn't pop up,
despite having xdg-utils installed.
This is an excerpt from output of "gnash -vv http://www.incubatepictures.com/index.swf"
It shown that gnash have re-encoded the URL before giving it to xdg-open,
rendering it corrupt.
I think the correct behaviour is to pass URL as-is from getURL to xdg-open.
But it may need some sort of command line escaping to prevent injection.
Gnash: gnash_0.8.10-1~lenny from getgnash.org APT repository
System: Debian GNU/Linux 5.0 "Lenny" i386
|