summaryrefslogtreecommitdiff
path: root/tests/src/BID-26800.txt
diff options
context:
space:
mode:
authorthomascube <thomas@roundcube.net>2011-12-10 01:50:03 +0000
committerthomascube <thomas@roundcube.net>2011-12-10 01:50:03 +0000
commit98c2d69acf3001379dc008dc52b77b618c291140 (patch)
treea3523e1460d1e67a8152ca6b974447213ea3ec01 /tests/src/BID-26800.txt
parent854397b216463d77561b8adadf880c3fbbcb8885 (diff)
Be more strict in style attribute filtering
Diffstat (limited to 'tests/src/BID-26800.txt')
-rw-r--r--tests/src/BID-26800.txt3
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/src/BID-26800.txt b/tests/src/BID-26800.txt
index 513516c09..e4e2fe795 100644
--- a/tests/src/BID-26800.txt
+++ b/tests/src/BID-26800.txt
@@ -10,13 +10,14 @@
<h1>2 test</h1>
<p>&lt;div&gt; block</p>
<div style="font-style:italic">valid css</div>
+<div style="color:red; background:url('//somedomain.com/somepath/somefile.png')">
<div style="{ left:expression( alert(&#039;expression!&#039;) ) }">
<div style="{ background:url( alert(&#039;URL!&#039;) ) }">
<h1>3 test</h1>
<p>Inject comment text</p>
<div style="{ left:exp/* */ression( alert(&#039;xss3&#039;) ) }">
-<div style="{ background:u/* */rl( alert(&#039;xssurl3&#039;) ) }">
+<div style=" background:u/* */rl( alert(&#039;xssurl3&#039;) ) ">
<h1>4 test</h1>
<p>Using reverse solid to directe the codepoint</p>