Docker/forgejo
Docker/forgejo
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-08-06 02:15:20 +02:00
Code Issues Releases Activity

test: prevent XSS for label rendering

Browse source
This commit is contained in:
Robert Wolff 2025-06-27 13:27:06 +02:00
parent 1b9ac27578
commit 76b3f4cd6a
3 changed files with 52 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

24
models/fixtures/label.yml
View file

@ -3,6 +3,7 @@
repo_id: 1
org_id: 0
name: label1
description: 'First label'
color: '#abcdef'
exclusive: false
num_issues: 2
@ -107,3 +108,26 @@
num_issues: 0
num_closed_issues: 0
archived_unix: 0
-
id: 11
repo_id: 3
org_id: 0
name: " <script>malicious</script> /'?&"
description: "Malicious label ' <script>malicious</script>"
color: '#000000'
exclusive: true
num_issues: 0
num_closed_issues: 0
archived_unix: 0
-
id: 12
repo_id: 3
org_id: 0
name: 'archived label<>'
color: '#000000'
exclusive: false
num_issues: 0
num_closed_issues: 0
archived_unix: 2991092130