OpenSource/jenkins
1
0 Fork 0
mirror of https://github.com/jenkinsci/jenkins.git synced 2026-11-15 21:12:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

[FIXED SECURITY-67] Forbid CSS links in markup to be on the safe side.(cherry picked from commit 1e19eb3ece)

Browse Source
This commit is contained in:
Jesse Glick authored and Kohsuke Kawaguchi committed 2013-05-01 14:16:37 -07:00
1 parent 7df0060b8d
commit d482fc50fb
2 files changed
+1 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

core/src/test/java/hudson/markup/MyspacePolicyTest.java
+1 -1
View File
@@ -43,7 +43,7 @@ public class MyspacePolicyTest extends Assert {
assertReject("script","<script src='relative.js'></script>");
assertIntact("<style>H1 { display:none; }</style>");
assertIntact("<link rel='stylesheet' type='text/css' href='http://www.microsoft.com/'>");
assertReject("link", "<link rel='stylesheet' type='text/css' href='http://www.microsoft.com/'>");
assertIntact("<div style='background-color:white'>inline CSS</div>");
assertIntact("<br><hr>");