mirror of
https://github.com/tenrok/axios.git
synced 2026-06-20 20:00:40 +03:00
Fix XSS logic that matched some valid urls (#2529)
* Fix XSS logic that matched some valid urls, e.g. "/one/?foo=bar", when it shouldn't match those
This commit is contained in:
@@ -12,6 +12,7 @@ describe('helpers::isValidXss', function () {
|
||||
});
|
||||
|
||||
it('should not detect non script tags', function() {
|
||||
expect(isValidXss("/one/?foo=bar")).toBe(false);
|
||||
expect(isValidXss("<safe> tags")).toBe(false);
|
||||
expect(isValidXss("<safetag>")).toBe(false);
|
||||
expect(isValidXss(">>> safe <<<")).toBe(false);
|
||||
|
||||
Reference in New Issue
Block a user