Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Tests about XSS - Switch from iframe to object #5260

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

Tests about XSS - Switch from iframe to object #5260

wants to merge 1 commit into from

Conversation

Gustry
Copy link
Member

@Gustry Gustry commented Jan 23, 2025

Linked to #4863 (comment)

It's not working for me on, my local, maybe because of unsecure link (instead of proper HTTPS ?)
I don't have any relevent log, just the message displayed inside

@Gustry Gustry added tests unit tests and docker configuration for tests backport release_3_8 backport release_3_9 labels Jan 23, 2025
@github-actions github-actions bot added this to the 3.10.0 milestone Jan 23, 2025
@Gustry
Copy link
Member Author

Gustry commented Jan 24, 2025

image

@Antoviscomi
Copy link
Contributor

Antoviscomi commented Jan 24, 2025 •
edited
Loading

Linked to #4863 (comment)

It's not working for me on, my local, maybe because of unsecure link (instead of proper HTTPS ?) I don't have any relevent log, just the message displayed inside

In my test also doesn't works, in my opinion until DOMPurify.sanitize will doesn't allow type=pdf/application. I tried to allow pdf and same origins via .htaccess server-side on Apache but none results, DOMPurify.sanitize ignore/sanitize server instructions. So it seems we not have chances of solutions at the present

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@nboisteault nboisteault

Labels
backport release_3_8 backport release_3_9 tests unit tests and docker configuration for tests
Projects
None yet
Milestone
3.10.0
Development

Successfully merging this pull request may close these issues.
3 participants
@Gustry @Antoviscomi @nboisteault