diff --git a/tests/www/test_views.py b/tests/www/test_views.py index b4d1d4cebdba2..ef05f6b1e675e 100644 --- a/tests/www/test_views.py +++ b/tests/www/test_views.py @@ -2778,7 +2778,7 @@ def test_trigger_dag_form(self): ("http://google.com", "/home"), ( "%2Ftree%3Fdag_id%3Dexample_bash_operator';alert(33)//", - "/tree?dag_id=example_bash_operator%27%3Balert%2833%29%2F%2F", + "/tree?dag_id=example_bash_operator%27&alert%2833%29%2F%2F=", ), ("%2Ftree%3Fdag_id%3Dexample_bash_operator", "/tree?dag_id=example_bash_operator"), ("%2Fgraph%3Fdag_id%3Dexample_bash_operator", "/graph?dag_id=example_bash_operator"), @@ -3321,7 +3321,7 @@ class TestHelperFunctions(TestBase): ( "http://localhost:8080/trigger?dag_id=test_dag&origin=%2Ftree%3Fdag_id%test_dag';alert(33)//", "http://localhost:8080/trigger?dag_id=test_dag&origin=%2Ftree%3F" - "dag_id%25test_dag%27%3Balert%2833%29%2F%2F", + "dag_id%25test_dag%27&alert%2833%29%2F%2F=", ), ( "http://localhost:8080/trigger?dag_id=test_dag&origin=%2Ftree%3Fdag_id%test_dag",