#2992 Prevent XSS for body request:

- added cases test to BodyXssUtilsTest;
SCADA-LTS · Sep 27, 2024 · d5f0a2a · d5f0a2a
1 parent da8df63
commit d5f0a2a
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/test/org/scada_lts/web/security/BodyXssUtilsTest.java b/test/org/scada_lts/web/security/BodyXssUtilsTest.java
@@ -136,6 +136,14 @@ public static Collection<Object[]> data() {
                         "    font-size: 2em !important;\n" +
                         "    display: inline-block !important;\n" +
                         "    line-height: 1 !important; \n" +
+                        "}", true},
+                {"#top-description-container {\n" +
+                        "    display: flex;\n" +
+                        "    align-items: flex-end;\n" +
+                        "    justify-content: center;\n" +
+                        "}", true},
+                {"#top-description-container {\n" +
+                        "    display: flex;\n" +
                         "}", true}
         });
     }

diff --git a/test/org/scada_lts/web/security/XssUtilsTest.java b/test/org/scada_lts/web/security/XssUtilsTest.java
@@ -115,6 +115,36 @@ public static Collection<Object[]> data() {
                 {"param1=document.location</script>", false},
                 {"param1=document.location/script>", false},
                 {"param1=document.location</script", false},
+                {"#top-description-container {\n" +
+                "    display: flex;\n" +
+                "    align-items: flex-end;\n" +
+                "    justify-content: center;\n" +
+                "} \n" +
+                "\n" +
+                "#top-description-prefix { \n" +
+                "    color: red !important;\n" +
+                "    font-size: 2em !important;\n" +
+                "    margin-left: 0.5em !important;\n" +
+                "    margin-right: 0.5em !important;\n" +
+                "    display: inline-block !important;\n" +
+                "    vertical-align: bottom !important;\n" +
+                "    line-height: 1 !important;\n" +
+                "} \n" +
+                "\n" +
+                "#top-description {\n" +
+                "    color: #39B54A !important;\n" +
+                "    font-size: 2em !important;\n" +
+                "    display: inline-block !important;\n" +
+                "    line-height: 1 !important; \n" +
+                "}", false},
+                {"#top-description-container {\n" +
+                        "    display: flex;\n" +
+                        "    align-items: flex-end;\n" +
+                        "    justify-content: center;\n" +
+                        "}", false},
+                {"#top-description-container {\n" +
+                        "    display: flex;\n" +
+                        "}", false}
         });
     }