From d32ebaddc8d647896c83c8e1db0e89ddf38f1245 Mon Sep 17 00:00:00 2001 From: Alex Schroeder Date: Sat, 15 Aug 2015 21:22:05 +0200 Subject: [PATCH] rss.t: XSS in summaries was fixed Thus it is revealed that the old version of the test was making sure that XSS was possible via the edit summary. Oh dear. --- t/rss.t | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/t/rss.t b/t/rss.t index 56e83c74..7e34da42 100644 --- a/t/rss.t +++ b/t/rss.t @@ -93,7 +93,7 @@ test_page(get_page('action=rss'), # limiting the size of our RSS feed update_page('big', 'foo foo foo', ''); -test_page(get_page('action=rss'), '<mu>'); +test_page(get_page('action=rss'), '&lt;mu&gt;'); test_page(get_page('action=rss full=1'), 'foo foo foo'); test_page(get_page('action=rss full=1 diff=1'), '<div class="diff">'); update_page('big', 'x' x 49000);