Template
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo synced 2024-11-25 11:16:11 +01:00
forgejo/tests/integration/fixtures/TestXSSReviewDismissed
Gusted ca798e4cc2
[SECURITY] Test XSS in dismissed review
It's possible for reviews to not be assiocated with users, when they
were migrated from another forge instance. In the migration code,
there's no sanitization check for author names, so they could contain
HTML tags and thus needs to be properely escaped.
2024-02-22 15:33:20 +01:00
..
comment.yml [SECURITY] Test XSS in dismissed review 2024-02-22 15:33:20 +01:00
review.yml [SECURITY] Test XSS in dismissed review 2024-02-22 15:33:20 +01:00