deblan-mirror/Choices
deblan-mirror/Choices
1
0
Fork 0
mirror of https://github.com/Choices-js/Choices.git synced 2024-05-17 21:16:34 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #983 from Choices-js/patch-1

Browse source 
Fix Sanitization of > Characters
This commit is contained in:
Matt Triff 2021-12-21 21:50:44 -05:00 committed by GitHub
parent f0ec43fa20 22f9be0d93
commit b92823b70c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/scripts/components/input.test.ts
View file

@ -315,7 +315,7 @@ describe('components/input', () => {
const value = '<script>somethingMalicious();</script>';
instance.element.value = value;
expect(instance.value).to.equal(
'&lt;script&rt;somethingMalicious();&lt;/script&rt;',
'&lt;script&gt;somethingMalicious();&lt;/script&gt;',
);
});
});

13
src/scripts/lib/utils.test.ts
View file

@ -1,19 +1,20 @@
/* eslint-disable no-new-wrappers */
import { expect } from 'chai';
import { stub } from 'sinon';
import {
getRandomNumber,
cloneObject,
diff,
dispatchEvent,
existsInArray,
generateChars,
generateId,
getRandomNumber,
getType,
isType,
sanitise,
sortByAlpha,
sortByScore,
existsInArray,
cloneObject,
dispatchEvent,
diff,
} from './utils';
describe('utils', () => {
@ -113,7 +114,7 @@ describe('utils', () => {
const value = '<script>somethingMalicious();</script>';
const output = sanitise(value);
expect(output).to.equal(
'&lt;script&rt;somethingMalicious();&lt;/script&rt;',
'&lt;script&gt;somethingMalicious();&lt;/script&gt;',
);
});
});

2
src/scripts/lib/utils.ts
View file

@ -93,7 +93,7 @@ export const sanitise = <T>(value: T | string): T | string => {
return value
.replace(/&/g, '&amp;')
.replace(/>/g, '&rt;')
.replace(/>/g, '&gt;')
.replace(/</g, '&lt;')
.replace(/"/g, '&quot;');
};