diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2017-07-26 21:14:05 +0200 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2017-07-26 21:14:05 +0200 |
| commit | 0aba1faa0803af6013c9ac2071e87f117e9c4835 (patch) | |
| tree | f5d1e7aa2f0fc24c3a38f290a8997fc39bf3f768 /tests/functions | |
| parent | 91f9050a70d95a472daf9f6fa15187c195f05909 (diff) | |
| download | forums-0aba1faa0803af6013c9ac2071e87f117e9c4835.tar forums-0aba1faa0803af6013c9ac2071e87f117e9c4835.tar.gz forums-0aba1faa0803af6013c9ac2071e87f117e9c4835.tar.bz2 forums-0aba1faa0803af6013c9ac2071e87f117e9c4835.tar.xz forums-0aba1faa0803af6013c9ac2071e87f117e9c4835.zip | |
[ticket/security/211] Do not match javascript URIs with URL regexes
SECURITY-211
Diffstat (limited to 'tests/functions')
| -rw-r--r-- | tests/functions/make_clickable_test.php | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/tests/functions/make_clickable_test.php b/tests/functions/make_clickable_test.php index 63beeb06b2..2cdefe689d 100644 --- a/tests/functions/make_clickable_test.php +++ b/tests/functions/make_clickable_test.php @@ -56,6 +56,10 @@ class phpbb_functions_make_clickable_test extends phpbb_test_case '<!-- l --><a class="postlink-local" href="http://testhost/viewtopic.php?t=1">viewtopic.php?t=1</a><!-- l -->' ), array( + 'javascript://testhost/viewtopic.php?t=1', + 'javascript://testhost/viewtopic.php?t=1' + ), + array( 'email@domain.com', '<!-- e --><a href="mailto:email@domain.com">email@domain.com</a><!-- e -->' ), @@ -93,6 +97,10 @@ class phpbb_functions_make_clickable_test extends phpbb_test_case '<!-- m --><a class="postlink" href="ftp://ftp.täst.de/">ftp://ftp.täst.de/</a><!-- m -->' ), array( + 'javascript://täst.de/', + 'javascript://täst.de/' + ), + array( 'sip://bantu@täst.de', '<!-- m --><a class="postlink" href="sip://bantu@täst.de">sip://bantu@täst.de</a><!-- m -->' ), |