From a3644638aaf0418598196a870204e0b632a4c8ad Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Fri, 17 Apr 2015 06:28:40 -0400 Subject: [PATCH] Allow preference sections to define CSS class names --- tests/src/BID-26800.txt | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/tests/src/BID-26800.txt b/tests/src/BID-26800.txt index 513516c..e4e2fe7 100644 --- a/tests/src/BID-26800.txt +++ b/tests/src/BID-26800.txt @@ -10,13 +10,14 @@ <h1>2 test</h1> <p><div> block</p> <div style="font-style:italic">valid css</div> +<div style="color:red; background:url('//somedomain.com/somepath/somefile.png')"> <div style="{ left:expression( alert('expression!') ) }"> <div style="{ background:url( alert('URL!') ) }"> <h1>3 test</h1> <p>Inject comment text</p> <div style="{ left:exp/* */ression( alert('xss3') ) }"> -<div style="{ background:u/* */rl( alert('xssurl3') ) }"> +<div style=" background:u/* */rl( alert('xssurl3') ) "> <h1>4 test</h1> <p>Using reverse solid to directe the codepoint</p> -- Gitblit v1.9.1