forked from phoedos/pmd
Additional negative test
This commit is contained in:
Sergey
committed by
Juan Martín Sotuyo Dodero
parent
382c8ca928
commit
9abb780da7
@ -240,6 +240,24 @@ XSS via item value
|
||||
</apex:form>
|
||||
</apex:page>
|
||||
|
||||
]]></code>
|
||||
<source-type>vf</source-type>
|
||||
</test-code>
|
||||
|
||||
<test-code>
|
||||
<description><![CDATA[
|
||||
XSS via item value
|
||||
]]></description>
|
||||
<expected-problems>0</expected-problems>
|
||||
<code><![CDATA[
|
||||
<apex:page>
|
||||
<apex:form>
|
||||
<apex:selectList value="{!string}" size="1">
|
||||
<apex:selectOption itemValue='{!HTMLENCODE(XSS)}' itemLabel="Red" itemEscaped="false"/>
|
||||
</apex:selectList>
|
||||
</apex:form>
|
||||
</apex:page>
|
||||
|
||||
]]></code>
|
||||
<source-type>vf</source-type>
|
||||
</test-code>
|
||||
|
Reference in New Issue
Block a user