Add the tests for to_json XSS in Rails 4

this was supposed to be part of 5ffafd80

Add the tests for to_json XSS in Rails 4
this was supposed to be part of 5ffafd80
20155345 · Justin Collins · ee558334 · 20155345
隐藏空白更改
内联并排

Showing with 7 addition and 0 deletion

test/apps/rails4/app/views/users/index.html.erb test/apps/rails4/app/views/users/index.html.erb +7 -0

未找到文件。
--- a/test/apps/rails4/app/views/users/index.html.erb
+++ b/test/apps/rails4/app/views/users/index.html.erb
+<%= raw User.find(params[:id]).to_json %>
+
+<%= raw inside_something(User.find(params[:id]).to_json) %>
+
+<%= raw call_something(params).to_json %>
+
+<%= raw params[:stuff].to_json %>