From 1e6d4d611d80dc7f20566ecc125354d84deebd1c Mon Sep 17 00:00:00 2001
From: Andrey Andreev <narf@devilix.net>
Date: Mon, 14 Sep 2015 16:06:37 +0300
Subject: Another addition to tag detection patterns in xss_clean()

---
 tests/codeigniter/core/Security_test.php | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'tests/codeigniter/core/Security_test.php')

diff --git a/tests/codeigniter/core/Security_test.php b/tests/codeigniter/core/Security_test.php
index 2e9cd01c4..ee5b82cbc 100644
--- a/tests/codeigniter/core/Security_test.php
+++ b/tests/codeigniter/core/Security_test.php
@@ -174,6 +174,11 @@ class Security_test extends CI_TestCase {
 			'<img src="x"> on=\'x\' onerror=``,alert(1)>',
 			$this->security->remove_evil_attributes('<img src="x"> on=\'x\' onerror=``,alert(1)>', FALSE)
 		);
+
+		$this->assertEquals(
+			'<a< [removed]>',
+			$this->security->remove_evil_attributes('<a< onmouseover="alert(1)">', FALSE)
+		);
 	}
 
 	// --------------------------------------------------------------------
-- 
cgit v1.2.3-24-g4f1b