Changeset 5636 in subversion

Timestamp:

Dec 21, 2011 5:21:59 AM (17 months ago)

Author:

alec

Message:

• Update tests

Location:

branches/release-0.7/tests

Files:

• mailfunc.php (modified) (1 diff)
• src/BID-26800.txt (modified) (2 diffs)

branches/release-0.7/tests/mailfunc.php

@@ -93 +93 @@
   {
     $part = $this->get_html_part('src/BID-26800.txt');
-    $washed = rcmail_print_body($part, array('safe' => true));
+    $washed = rcmail_html4inline(rcmail_print_body($part, array('safe' => true)), 'dabody', '', $attr, true);
 
     $this->assertNoPattern('/alert|expression|javascript|xss/', $washed, "Remove evil style blocks");

branches/release-0.7/tests/src/BID-26800.txt

@@ -11 +11 @@
 <p>&lt;div&gt; block</p>
 <div style="font-style:italic">valid css</div>
+<div style="color:red; background:url('//somedomain.com/somepath/somefile.png')">
 <div style="{ left:expression( alert(&#039;expression!&#039;) ) }">
 <div style="{ background:url( alert(&#039;URL!&#039;) ) }">
@@ -17 +18 @@
 <p>Inject comment text</p>
 <div style="{ left:exp/*  */ression( alert(&#039;xss3&#039;) ) }">
-<div style="{ background:u/* */rl( alert(&#039;xssurl3&#039;) ) }">
+<div style=" background:u/* */rl( alert(&#039;xssurl3&#039;) ) ">
 
 <h1>4 test</h1>