r69955 MediaWiki - Code Review archive

Repository:MediaWiki
Revision:r69954‎ | r69955 | r69956 >
Date:18:38, 26 July 2010
Author:platonides
Status:deferred
Tags:
Comment:
MFT r67101. Fix parserTests broken r66992
Modified paths:
  • /branches/REL1_15/phase3/maintenance/parserTests.txt (modified) (history)

Diff [purge]

Index: branches/REL1_15/phase3/maintenance/parserTests.txt
@@ -399,7 +399,7 @@
400400 !! input
401401 <pre width="8" style="border-width: expression(alert(document.cookie))">Narrow screen goodies</pre>
402402 !! result
403 -<pre width="8">Narrow screen goodies</pre>
 403+<pre width="8" style="/* insecure input */">Narrow screen goodies</pre>
404404
405405 !! end
406406
@@ -4150,7 +4150,7 @@
41514151 !! input
41524152 <div style="{{dangerous style attribute}}"></div>
41534153 !! result
4154 -<div></div>
 4154+<div style="/* insecure input */"></div>
41554155
41564156 !! end
41574157
@@ -4168,7 +4168,7 @@
41694169 !! input
41704170 {{div style|width: expression(alert(document.cookie))}}
41714171 !! result
4172 -<div>Magic div</div>
 4172+<div style="/* insecure input */">Magic div</div>
41734173
41744174 !! end
41754175
@@ -4277,7 +4277,7 @@
42784278 !! input
42794279 <div style="<nowiki>border-left:expression(alert(document.cookie))</nowiki>"></div>
42804280 !! result
4281 -<div></div>
 4281+<div style="/* insecure input */"></div>
42824282
42834283 !! end
42844284
@@ -4297,7 +4297,7 @@
42984298 !! input
42994299 <div style="background-image:u\rl(javascript:alert('boo'))">evil</div>
43004300 !! result
4301 -<div>evil</div>
 4301+<div style="/* insecure input */">evil</div>
43024302
43034303 !! end
43044304
@@ -4306,7 +4306,7 @@
43074307 !! input
43084308 <div style="background-image:u\72l(javascript:alert('boo'))">evil</div>
43094309 !! result
4310 -<div>evil</div>
 4310+<div style="/* insecure input */">evil</div>
43114311
43124312 !! end
43134313
@@ -4352,7 +4352,7 @@
43534353 !! result
43544354 <table>
43554355 <tr>
4356 -<th> status
 4356+<th style="/* insecure input */"> status
43574357 </th></tr></table>
43584358
43594359 !! end
@@ -4362,7 +4362,7 @@
43634363 !! input
43644364 <div style="background-image: u\&#10;rl(test.jpg);"></div>
43654365 !! result
4366 -<div></div>
 4366+<div style="/* insecure input */"></div>
43674367
43684368 !! end
43694369
@@ -4371,7 +4371,7 @@
43724372 !! input
43734373 <div style="background-image: u\&#13;rl(test.jpg); "></div>
43744374 !! result
4375 -<div></div>
 4375+<div style="/* insecure input */"></div>
43764376
43774377 !! end
43784378

Past revisions this follows-up on

RevisionCommit summaryAuthorDate
r66992MFT r66990 (CSS escape sequence normalisation), and updates for release of 1....tstarling07:08, 28 May 2010
r67101Follow up r66990. Fix parser tests.platonides18:59, 30 May 2010

Status & tagging log