jenkins-bot has submitted this change and it was merged.
Change subject: Test against injection in comment lines
......................................................................
Test against injection in comment lines
Change-Id: I90f2a043731389bc84419e8e253269787e4e6a6e
---
M client/tests/phpunit/includes/recentchanges/ChangeLineFormatterTest.php
1 file changed, 9 insertions(+), 0 deletions(-)
Approvals:
Hoo man: Looks good to me, approved
jenkins-bot: Verified
diff --git
a/client/tests/phpunit/includes/recentchanges/ChangeLineFormatterTest.php
b/client/tests/phpunit/includes/recentchanges/ChangeLineFormatterTest.php
index f69e176..383946c 100644
--- a/client/tests/phpunit/includes/recentchanges/ChangeLineFormatterTest.php
+++ b/client/tests/phpunit/includes/recentchanges/ChangeLineFormatterTest.php
@@ -124,6 +124,15 @@
null
)
),
+ 'comment-injection' => array(
+ array(),
+ array(
+
'/\(<script>evil<\/script>\)/'
+ ),
+ $this->getEditSiteLinkRecentChange(
+ '<script>evil</script>'
+ )
+ ),
);
}
--
To view, visit https://gerrit.wikimedia.org/r/237683
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I90f2a043731389bc84419e8e253269787e4e6a6e
Gerrit-PatchSet: 8
Gerrit-Project: mediawiki/extensions/Wikibase
Gerrit-Branch: master
Gerrit-Owner: Daniel Kinzler <daniel.kinz...@wikimedia.de>
Gerrit-Reviewer: Aude <aude.w...@gmail.com>
Gerrit-Reviewer: Daniel Kinzler <daniel.kinz...@wikimedia.de>
Gerrit-Reviewer: Hoo man <h...@online.de>
Gerrit-Reviewer: Jonas Kress (WMDE) <jonas.kr...@wikimedia.de>
Gerrit-Reviewer: Thiemo Mättig (WMDE) <thiemo.maet...@wikimedia.de>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
