Fixed XSS from markdown()
This commit is contained in:
parent
a42240b5a6
commit
436c4fd972
4 changed files with 14 additions and 1 deletions
|
|
@ -45,4 +45,9 @@ FactoryGirl.define do
|
|||
end
|
||||
end
|
||||
end
|
||||
|
||||
factory :user_xss, parent: :user do
|
||||
biography "<div id='divInjectedElement'></div>"
|
||||
end
|
||||
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue