diff options
| author | Andrey Andreev <narf@devilix.net> | 2015-09-10 17:00:57 +0200 |
|---|---|---|
| committer | Andrey Andreev <narf@devilix.net> | 2015-09-10 17:00:57 +0200 |
| commit | 12023a79b0c3b45f68cce0357e3009c5884da663 (patch) | |
| tree | 128cd868cbcdb318438d4ede40e9b63eb8f2061a /tests | |
| parent | abc6006884658acb4e2302460f87e2f89a5a7e80 (diff) | |
Last commit didn't adjust a RE index
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/codeigniter/core/Security_test.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/codeigniter/core/Security_test.php b/tests/codeigniter/core/Security_test.php index 8e6d276fc..1958526ee 100644 --- a/tests/codeigniter/core/Security_test.php +++ b/tests/codeigniter/core/Security_test.php @@ -154,6 +154,11 @@ class Security_test extends CI_TestCase { '<foo bar=">" baz=\'>\' [removed]>', $this->security->remove_evil_attributes('<foo bar=">" baz=\'>\' onAfterGreaterThan=noQuotes>', FALSE) ); + + $this->assertEquals( + '<img src="x" [removed]> on=<svg> onerror=alert(1)>', + $this->security->remove_evil_attributes('<img src="x" on=""> on=<svg> onerror=alert(1)>', FALSE) + ); } // -------------------------------------------------------------------- |