Add test for nested incomplete tag sanitization

trentm · Aug 30, 2022 · 824d03d · 824d03d
1 parent af5407d
commit 824d03d
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/test/tm-cases/nested_incomplete_tags_xss.html b/test/tm-cases/nested_incomplete_tags_xss.html
@@ -0,0 +1,7 @@
+<p>&lt;img &lt;img src="" onerror=alert(/XSS/) </p>
+
+<p>&lt;img&lt;img src="" onerror=alert(/XSS/) </p>
+
+<p>&lt;img&lt;img/src="" onerror=alert(/XSS/) </p>
+
+<p>&lt;img&lt;img&lt;img src="" onerror=alert(/XSS/) </p>
diff --git a/test/tm-cases/nested_incomplete_tags_xss.opts b/test/tm-cases/nested_incomplete_tags_xss.opts
@@ -0,0 +1 @@
+{"safe_mode": "replace"}
diff --git a/test/tm-cases/nested_incomplete_tags_xss.text b/test/tm-cases/nested_incomplete_tags_xss.text
@@ -0,0 +1,7 @@
+<img <img src="" onerror=alert(/XSS/)
+
+<img<img src="" onerror=alert(/XSS/)
+
+<img<img/src="" onerror=alert(/XSS/)
+
+<img<img<img src="" onerror=alert(/XSS/)