diff --git a/cypress/integration/other/xss.spec.js b/cypress/integration/other/xss.spec.js index f605e98dc..6226feaeb 100644 --- a/cypress/integration/other/xss.spec.js +++ b/cypress/integration/other/xss.spec.js @@ -115,4 +115,18 @@ describe('XSS', () => { cy.wait(1000); cy.get('#the-malware').should('not.exist'); }); + it('should sanitize colons properly', () => { + cy.visit('http://localhost:9000/xss20.html'); + cy.wait(1000); + cy.get('a').click(''); + cy.wait(1000); + cy.get('#the-malware').should('not.exist'); + }); + it('should sanitize colons properly', () => { + cy.visit('http://localhost:9000/xss21.html'); + cy.wait(1000); + cy.get('a').click(''); + cy.wait(1000); + cy.get('#the-malware').should('not.exist'); + }); }); diff --git a/cypress/platform/xss20.html b/cypress/platform/xss20.html new file mode 100644 index 000000000..33d4dfccb --- /dev/null +++ b/cypress/platform/xss20.html @@ -0,0 +1,105 @@ + +
+ + + + + + + +