Add another testcase for xss

This commit is contained in:
Michal Čihař 2011-07-25 14:18:36 +02:00
parent a418fa95b9
commit c2b530c005

View File

@ -33,6 +33,12 @@ class PMA_sanitize_test extends PHPUnit_Framework_TestCase
PMA_sanitize('[a@./Documentation.html]doc[/a]'));
}
public function testLinkDocXss()
{
$this->assertEquals('[a@./Documentation.html" onmouseover="alert(foo)"]doc</a>',
PMA_sanitize('[a@./Documentation.html" onmouseover="alert(foo)"]doc[/a]'));
}
public function testLinkAndXssInHref()
{
$this->assertEquals('<a href="./Documentation.html">doc</a>[a@javascript:alert(\'XSS\');@target]link</a>',