CARVIEW |
Select Language
HTTP/2 200
date: Wed, 16 Jul 2025 22:01:45 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
x-repository-download: git clone https://github.com/w3c/epubcheck.git
etag: W/"d05f8fa0f2956a773870bf804e977bac"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=AOowZtiluYH%2B7l2viV840JwDKF4HA3cwXqUv2lTrdieYZrhIXxbqXCQWryk3DlY7%2Fz6%2B70NWzvk0zaiZycNj19jeNUqgoEAAwd43fknjBZf2eEYAvkFb7BYiqJJCVzlFAU2zD74kENU9q9KdzLSHjcQwA71LHUH3%2FGKdiZN9HeNhx0Jd9rBxpAZ10IcUmsbb6DntncBTxlUPZ%2FSVgCllb8DGrslT8KtyJtcGNKUWoMI1MEX78GomcAisH2On1Kn2eU8I8IOWVYciabIPUtg4BA%3D%3D--jsZd6%2FWb8QPaaDA1--IY9BACqjni2Ya%2BcqkzWkuw%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1407118693.1752703304; Path=/; Domain=github.com; Expires=Thu, 16 Jul 2026 22:01:44 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Thu, 16 Jul 2026 22:01:44 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: B978:470FF:E270D:13AF5D:68782148
feat: improve checking of data URLs · w3c/epubcheck@cbc0b2a · GitHub
Dismiss banner
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/messages/DefaultSeverities.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/messages/MessageId.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/ocf/OCFContainer.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFChecker.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFChecker30.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFItem.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/ValidationContext.java
Skip to content
Navigation Menu
{{ message }}
-
Notifications
You must be signed in to change notification settings - Fork 418
Commit cbc0b2a
committed
feat: improve checking of data URLs
This commit introduces the following checks:
- `RSC-029`(new): check that `data` URLs are not used when they would result in a
top-level browsing context
- check `data` URLs for foreign resource restrictions (fallbacks)
An OPFItem instance can now represent a manifest item defined as a
data URL. A `hasDataURL()` method will tell if this is the case.
Fix #1238, fix #1239.1 parent 20b5142 commit cbc0b2aCopy full SHA for cbc0b2a
File tree
Expand file treeCollapse file tree
47 files changed
+806
-70
lines changedFilter options
- src
- main
- java
- com/adobe/epubcheck
- messages
- ocf
- opf
- ops
- xml/handlers
- org/w3c/epubcheck/url
- resources/com/adobe/epubcheck/messages
- test/resources/epub3
- 00-minimal
- 03-resources
- files
- data-url-in-html-img-cmt-valid
- EPUB
- META-INF
- data-url-in-html-img-foreign-intrinsic-fallback-valid
- EPUB
- META-INF
- data-url-in-html-img-foreign-manifest-fallback-valid
- EPUB
- META-INF
- data-url-in-html-img-foreign-no-fallback-error
- EPUB
- META-INF
- data-url-in-html-link-exempt-valid
- EPUB
- META-INF
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Expand file treeCollapse file tree
47 files changed
+806
-70
lines changedsrc/main/java/com/adobe/epubcheck/messages/DefaultSeverities.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/messages/DefaultSeverities.java+1Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
340 | 340 |
| |
341 | 341 |
| |
342 | 342 |
| |
| 343 | + | |
343 | 344 |
| |
344 | 345 |
| |
345 | 346 |
| |
|
src/main/java/com/adobe/epubcheck/messages/MessageId.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/messages/MessageId.java+1Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
334 | 334 |
| |
335 | 335 |
| |
336 | 336 |
| |
| 337 | + | |
337 | 338 |
| |
338 | 339 |
| |
339 | 340 |
| |
|
src/main/java/com/adobe/epubcheck/ocf/OCFContainer.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/ocf/OCFContainer.java+2-1Lines changed: 2 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
130 | 130 |
| |
131 | 131 |
| |
132 | 132 |
| |
133 |
| - | |
| 133 | + | |
134 | 134 |
| |
135 | 135 |
| |
136 | 136 |
| |
| 137 | + | |
137 | 138 |
|
src/main/java/com/adobe/epubcheck/opf/OPFChecker.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFChecker.java+5-1Lines changed: 5 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
210 | 210 |
| |
211 | 211 |
| |
212 | 212 |
| |
213 |
| - | |
| 213 | + | |
214 | 214 |
| |
215 | 215 |
| |
216 | 216 |
| |
| |||
378 | 378 |
| |
379 | 379 |
| |
380 | 380 |
| |
| 381 | + | |
| 382 | + | |
| 383 | + | |
| 384 | + | |
381 | 385 |
| |
382 | 386 |
| |
383 | 387 |
| |
|
src/main/java/com/adobe/epubcheck/opf/OPFChecker30.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFChecker30.java+6Lines changed: 6 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
186 | 186 |
| |
187 | 187 |
| |
188 | 188 |
| |
| 189 | + | |
| 190 | + | |
| 191 | + | |
| 192 | + | |
| 193 | + | |
| 194 | + | |
189 | 195 |
| |
190 | 196 |
| |
191 | 197 |
| |
|
src/main/java/com/adobe/epubcheck/opf/OPFItem.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/OPFItem.java+17Lines changed: 17 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
109 | 109 |
| |
110 | 110 |
| |
111 | 111 |
| |
| 112 | + | |
| 113 | + | |
| 114 | + | |
| 115 | + | |
| 116 | + | |
| 117 | + | |
| 118 | + | |
112 | 119 |
| |
113 | 120 |
| |
114 | 121 |
| |
| |||
289 | 296 |
| |
290 | 297 |
| |
291 | 298 |
| |
| 299 | + | |
| 300 | + | |
| 301 | + | |
| 302 | + | |
| 303 | + | |
| 304 | + | |
| 305 | + | |
| 306 | + | |
| 307 | + | |
| 308 | + | |
292 | 309 |
| |
293 | 310 |
| |
294 | 311 |
| |
|
src/main/java/com/adobe/epubcheck/opf/ValidationContext.java
Copy file name to clipboardExpand all lines: src/main/java/com/adobe/epubcheck/opf/ValidationContext.java+2-2Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
141 | 141 |
| |
142 | 142 |
| |
143 | 143 |
| |
144 |
| - | |
| 144 | + | |
145 | 145 |
| |
146 | 146 |
| |
147 | 147 |
| |
| |||
181 | 181 |
| |
182 | 182 |
| |
183 | 183 |
| |
184 |
| - | |
| 184 | + | |
185 | 185 |
| |
186 | 186 |
| |
187 | 187 |
| |
|
You can’t perform that action at this time.
0 commit comments