Yasu Flores 29da6b24db Fix to prevent XSS, throw an error when the URL contains a JS script (#2464) ...

* Fixes issue where XSS scripts attacks were possible via the URL

* Fix error

* Move throwing error up

* Add specs and make regex cover more xss cases

2019-10-16 07:53:10 -03:00

..

bind.spec.js

Moving bind into it's own file

2015-12-14 20:06:16 -07:00

buildURL.spec.js

Fixing building url with hash mark (#1771)

2018-09-04 09:53:57 +02:00

combineURLs.spec.js

Fixing combineURLs to support an empty relativeURL (#581)

2016-12-07 21:23:45 -08:00

cookies.spec.js

Moving many nodeunit tests to jasmine

2015-03-18 17:12:51 -06:00

isAbsoluteURL.spec.js

Add isAbsoluteURL helper

2015-11-21 19:29:53 -08:00

isURLSameOrigin.spec.js

Fix to prevent XSS, throw an error when the URL contains a JS script (#2464)

2019-10-16 07:53:10 -03:00

isValidXss.spec.js

Fix to prevent XSS, throw an error when the URL contains a JS script (#2464)

2019-10-16 07:53:10 -03:00

normalizeHeaderName.spec.js

Adding support for URLSearchParams

2016-05-07 12:26:28 -07:00

parseHeaders.spec.js

Duplicate header handling (#874)

2017-08-12 14:58:10 +02:00

spread.spec.js

return result from callback

2015-09-02 10:43:27 -07:00