removing patterns that don't get sanitized, but also don't get interpreted when inserted into the HTML

2017-11-22 20:49:23 +01:00 · 2017-11-22 20:49:23 +01:00 · d0cccce7a8
commit d0cccce7a8
parent 56f4ee5c20
1 changed files with 0 additions and 6 deletions
--- a/js/test.js
+++ b/js/test.js
@ -1469,12 +1469,6 @@ describe('PasteViewer', function () {
                '<TABLE BACKGROUND="javascript:alert(\'XSS\')">',
                '<TABLE><TD BACKGROUND="javascript:alert(\'XSS\')">',
                '<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="httx://xss.rocks/xss.js"></SCRIPT>',
-                '(alert)(1)',
-                'a=alert,a(1)',
-                'top[“al”+”ert”](1)',
-                'top[/al/.source+/ert/.source](1)',
-                'al\u0065rt(1)',
-                'top[8680439..toString(30)](1)'
            ]),
            'string',
            function (format, prefix, xss, suffix) {