multipleof4/ntfy
1
0
Fork 0
mirror of https://github.com/multipleof4/ntfy.git synced 2026-10-11 14:25:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Bump and Fixes

Browse Source
This commit is contained in:
binwiederhier
2026-07-01 11:49:48 -04:00
parent 8a67b5129e
commit e39de727e0
4 changed files with 48 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/app/utils.test.js
+2
View File
@@ -241,9 +241,11 @@ describe("sanitizeUrl", () => {
});
it("strips dangerous protocols", () => {
/* eslint-disable no-script-url -- these javascript: literals are exactly what we're testing */
expect(sanitizeUrl("javascript:alert(document.domain)")).toBe("");
expect(sanitizeUrl("JavaScript:alert(1)")).toBe("");
expect(sanitizeUrl(" javascript:alert(1)")).toBe("");
/* eslint-enable no-script-url */
expect(sanitizeUrl("vbscript:msgbox(1)")).toBe("");
expect(sanitizeUrl("data:text/html,<script>alert(1)</script>")).toBe("");
});