Changeset 4598

Timestamp:

12/27/2016 08:18:01 PM (7 years ago)

Author:

iandunn

Message:

WordCamp Remote CSS: Add unit test for data: protocol in URLs

See #1616

Location:

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-remote-css/tests

Files:

• sanitized.css (modified) (1 diff)
• unsanitized.css (modified) (1 diff)

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-remote-css/tests/sanitized.css

@@ -39 +39 @@
 alert(9);
 
+a {
+    /* This might be safe, but not sure yet, so leaving it here since it should be considered unsafe until proven otherwise. See #1616-meta */
+    background-image: url( 'image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ+YWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg==' );
+}
+
 /* Bindings */
 body {

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-remote-css/tests/unsanitized.css

@@ -54 +54 @@
 <script>alert(9);</script>
 
+a {
+    /* This might be safe, but not sure yet, so leaving it here since it should be considered unsafe until proven otherwise. See #1616-meta */
+    background-image: url( 'data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ+YWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg==' );
+}
+
+
 /* Bindings */
 body {