Add testcase for combined link and XSS attempt

2011-07-25 14:13:03 +02:00 · 2011-07-25 14:13:03 +02:00 · a418fa95b9
commit a418fa95b9
parent 8d589ed83e
1 changed files with 6 additions and 0 deletions
--- a/test/libraries/PMA_sanitize_test.php
+++ b/test/libraries/PMA_sanitize_test.php
@ -33,6 +33,12 @@ class PMA_sanitize_test extends PHPUnit_Framework_TestCase
            PMA_sanitize('[a@./Documentation.html]doc[/a]'));
    }

+    public function testLinkAndXssInHref()
+    {
+        $this->assertEquals('<a href="./Documentation.html">doc</a>[a@javascript:alert(\'XSS\');@target]link</a>',
+            PMA_sanitize('[a@./Documentation.html]doc[/a][a@javascript:alert(\'XSS\');@target]link[/a]'));
+    }
+
    public function testHtmlTags()
    {
        $this->assertEquals('&lt;div onclick=""&gt;',