PT-2026-31349

Summary LiquidJS enforces partial and layout root restrictions using the resolved pathname string, but it does not resolve the canonical filesystem path before opening the file. A symlink placed inside an allowed partials or layouts directory can therefore point to a file outside that directory a...

CVE-2011-2808

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...

CVE-2011-2808

CVE-2011-2808 affects WebKit in Google Chrome prior to Blink M13, where a stale layout root is assigned to an input element when a child of a keygen with autofocus is accessed. This is the underlying cause described in the NVD entry. The associated impact is indicated by a partial availability im...

CVE-2011-2808

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...