Discourse/discourse
Discourse/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-09-06 10:50:21 +08:00
Code Packages Activity Actions 9

FIX: double-escaped single quotes in URLs

Browse source
This commit is contained in:
Jens Maier 2014-09-18 22:00:34 +02:00
parent da91ab25cf
commit 543bc53598
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
test/javascripts/lib/markdown-test.js.es6
View file

@ -458,7 +458,7 @@ test("urlAllowed", function() {
allowed("//eviltrout.com/evil/trout", "allows protocol relative urls");
equal(urlAllowed("http://google.com/test'onmouseover=alert('XSS!');//.swf"),
"http://google.com/test'onmouseover=alert('XSS!');//.swf",
"http://google.com/test%27onmouseover=alert(%27XSS!%27);//.swf",
"escape single quotes");
});