From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Tue, 22 Oct 2013 08:17:26 -0400
Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

---
 skins/classic/pngbehavior.htc |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/skins/classic/pngbehavior.htc b/skins/classic/pngbehavior.htc
index fb5f1c8..6f892df 100644
--- a/skins/classic/pngbehavior.htc
+++ b/skins/classic/pngbehavior.htc
@@ -24,7 +24,7 @@
 
 var supported = /MSIE ((5\.5)|6)/.test(navigator.userAgent) && navigator.platform == "Win32",
   realSrc,
-  blankSrc = "skins/default/images/blank.gif",
+  blankSrc = "program/resources/blank.gif",
   isPrinting = false;
 
 if (supported) fixImage();

--
Gitblit v1.9.1