Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve #99 - Optimize "_sanitize_naughty_javascript" #101

Merged
merged 4 commits into from
Mar 6, 2022

Conversation

Fahl-Design
Copy link
Contributor

@Fahl-Design Fahl-Design commented Mar 4, 2022

fixes #99

todo:

  • _sanitize_naughty_javascript with tests
  • _do_never_allowed_afterwards (see test cases testXssCleanNeverAllowedAfterwards)

This change is Reviewable

…negative look behind

- add test cases
- change js test result (no longer false positive)

Signed-off-by: Benjamin Fahl <git@fahl-design.de>
… false positive cases

Signed-off-by: Benjamin Fahl <git@fahl-design.de>
Signed-off-by: Benjamin Fahl <git@fahl-design.de>
@coveralls
Copy link

coveralls commented Mar 4, 2022

Coverage Status

Coverage remained the same at 94.01% when pulling 8c027db on Fahl-Design:optimize_sanatize_naughty_js_check into 20a89b5 on voku:master.

@codecov
Copy link

codecov bot commented Mar 4, 2022

Codecov Report

Merging #101 (8c027db) into master (20a89b5) will not change coverage.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff            @@
##             master     #101   +/-   ##
=========================================
  Coverage     93.98%   93.98%           
  Complexity      183      183           
=========================================
  Files             2        2           
  Lines           665      665           
=========================================
  Hits            625      625           
  Misses           40       40           
Impacted Files Coverage Δ
src/voku/helper/AntiXSS.php 93.97% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 20a89b5...8c027db. Read the comment docs.

Signed-off-by: Benjamin Fahl <git@fahl-design.de>
@voku voku merged commit 02c855f into voku:master Mar 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

False positive for "wordContainingFile(" in _sanitize_naughty_javascript
3 participants