Fixed XSS from markdown()
This commit is contained in:
parent
a42240b5a6
commit
436c4fd972
4 changed files with 14 additions and 1 deletions
|
|
@ -35,4 +35,8 @@ FactoryGirl.define do
|
|||
end
|
||||
end
|
||||
end
|
||||
|
||||
factory :event_xss, parent: :event do
|
||||
abstract { "<div id='divInjectedElement'></div>" }
|
||||
end
|
||||
end
|
||||
|
|
|
|||
|
|
@ -6,4 +6,8 @@ FactoryGirl.define do
|
|||
description { Faker::Lorem.paragraph }
|
||||
website_link { Faker::Internet.url }
|
||||
end
|
||||
|
||||
factory :lodging_xss, parent: :lodging do
|
||||
description { "<div id='divInjectedElement'></div>" }
|
||||
end
|
||||
end
|
||||
|
|
|
|||
|
|
@ -45,4 +45,9 @@ FactoryGirl.define do
|
|||
end
|
||||
end
|
||||
end
|
||||
|
||||
factory :user_xss, parent: :user do
|
||||
biography "<div id='divInjectedElement'></div>"
|
||||
end
|
||||
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue