From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Fri, 05 Feb 2016 07:25:27 -0500
Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports

---
 tests/src/BID-26800.txt |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/tests/src/BID-26800.txt b/tests/src/BID-26800.txt
index 513516c..e4e2fe7 100644
--- a/tests/src/BID-26800.txt
+++ b/tests/src/BID-26800.txt
@@ -10,13 +10,14 @@
 <h1>2 test</h1>
 <p>&lt;div&gt; block</p>
 <div style="font-style:italic">valid css</div>
+<div style="color:red; background:url('//somedomain.com/somepath/somefile.png')">
 <div style="{ left:expression( alert(&#039;expression!&#039;) ) }">
 <div style="{ background:url( alert(&#039;URL!&#039;) ) }">
 
 <h1>3 test</h1>
 <p>Inject comment text</p>
 <div style="{ left:exp/*  */ression( alert(&#039;xss3&#039;) ) }">
-<div style="{ background:u/* */rl( alert(&#039;xssurl3&#039;) ) }">
+<div style=" background:u/* */rl( alert(&#039;xssurl3&#039;) ) ">
 
 <h1>4 test</h1>
 <p>Using reverse solid to directe the codepoint</p>

--
Gitblit v1.9.1