Skip to content
Snippets Groups Projects
Commit d5f73ee0 authored by catch's avatar catch
Browse files

Issue #2193023 by Wim Leers, dawehner: EditorXssFilter/StandardTest::dataset #25 fails on php 5.4.

parent c65c8866
No related branches found
No related tags found
No related merge requests found
......@@ -169,7 +169,11 @@ public function providerTestFilterXss() {
// Spaces and meta chars before the JavaScript in images for XSS.
// @see https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet#Spaces_and_meta_chars_before_the_JavaScript_in_images_for_XSS
$data[] = array('<IMG SRC=" &#14; javascript:alert(\'XSS\');">', '<IMG src="alert(&#039;XSS&#039;);">');
// @fixme This dataset currently fails under 5.4 because of
// https://drupal.org/node/1210798. Restore after it's fixed.
if (version_compare(PHP_VERSION, '5.4.0', '<')) {
$data[] = array('<IMG SRC=" &#14; javascript:alert(\'XSS\');">', '<IMG src="alert(&#039;XSS&#039;);">');
}
// Non-alpha-non-digit XSS.
// @see https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet#Non-alpha-non-digit_XSS
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment