Clean xss.json

stckme · Feb 13, 2024 · afff934 · afff934
1 parent bc204d4
commit afff934
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 16 deletions.
diff --git a/tests/data/html/xss.html b/tests/data/html/xss.html
@@ -1 +1 @@
-<div data-foo="bar" data-&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;="&quot;&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;"><figure class="featured-image"><picture><source srcset="&quot;&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;" type="image"/><source srcset="&quot;&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;" type="image"/><img src="&quot;&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;" alt="&quot;&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;"/></picture><figcaption>&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;</figcaption></figure><p><a foo="bar" &quot; onmouseover=&quot;alert(&#x27;pwned!&#x27;)&quot;=&quot;="&quot; onmouseover=&quot;alert(&#x27;pwned!&#x27;)&quot;=&quot;" target="_blank" rel="noopener nofollow">&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;</a></p></div>
+<div data-foo="&quot;/&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;" data-&gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;="foo"><p><a foo="&quot;&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;" &gt;&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;="foo" target="_blank" rel="noopener nofollow">&lt;script&gt;alert(&#x27;pwned!&#x27;);&lt;/script&gt;</a></p></div>
diff --git a/tests/data/json/xss.json b/tests/data/json/xss.json
@@ -2,22 +2,11 @@
   "type": "doc",
   "attrs": {
     "data": {
-      "foo": "bar",
-      "><script>alert('pwned!');</script>": "\"><script>alert('pwned!');</script>"
+      "foo": "\"/><script>alert('pwned!');</script>",
+      "><script>alert('pwned!');</script>": "foo"
     }
   },
   "content": [
-    {
-      "type": "featuredimage",
-      "attrs": {
-        "src": {
-          "image": "\"><script>alert('pwned!');</script>",
-          "fallback": "\"><script>alert('pwned!');</script>"
-        },
-        "alt": "\"><script>alert('pwned!');</script>",
-        "caption": "<script>alert('pwned!');</script>"
-      }
-    },
     {
       "type": "paragraph",
       "content": [
@@ -27,8 +16,8 @@
             {
               "type": "link",
               "attrs": {
-                "\" onmouseover=\"alert('pwned!')\"=\"": "\" onmouseover=\"alert('pwned!')\"=\"",
-                "foo": "bar"
+                "><script>alert('pwned!');</script>": "foo",
+                "foo": "\">alert('pwned!');</script>"
               }
             }
           ],