rainbownapkin/fore.st
1
0
Fork 0
Code Issues 13 Pull requests Projects Releases Packages Wiki Activity Actions

Fix a few edge cases for XSS

Browse source
This commit is contained in:
calzoneman 2013-10-31 00:48:01 -05:00
parent 271a23cdad
commit 1c3273978b
2 changed files with 20 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tests/xss.js
View file

@ -10,6 +10,11 @@ function basicTest() {
assert(sanitize("<a href='javascript:alert(document.cookie)'>") ===
"<a href=\":()\">");
assert(sanitize("<a ") === "<a>");
assert(sanitize("<img src=\"<a href=\"javascript:void(0)\">>") ===
"<img src=\"<a href=\" javascriptvoid0=\"\">>");
}
basicTest();