CalvinBackup/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2026-09-28 04:31:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(core): Replace sanitize-html with xss in XSS validator constraint (#10479)

Browse Source
This commit is contained in:
Iván Ovejero
2024-08-20 20:52:04 +02:00
committed by GitHub
parent aad3e5b677
commit 5dea51aad7
4 changed files with 38 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/cli/src/validators/__tests__/no-xss.validator.test.ts
+13 -1
View File
@@ -16,7 +16,8 @@ describe('NoXss', () => {
const entity = new Entity();
describe('Scripts', () => {
const XSS_STRINGS = ['<script src/>', "<script>alert('xss')</script>"];
// eslint-disable-next-line n8n-local-rules/no-unneeded-backticks
const XSS_STRINGS = ['<script src/>', "<script>alert('xss')</script>", `<a href="#">Jack</a>`];
for (const str of XSS_STRINGS) {
test(`should block ${str}`, async () => {
@@ -69,4 +70,15 @@ describe('NoXss', () => {
});
}
});
describe('Miscellanous strings', () => {
const VALID_MISCELLANEOUS_STRINGS = ['CI/CD'];
for (const str of VALID_MISCELLANEOUS_STRINGS) {
test(`should allow ${str}`, async () => {
entity.name = str;
await expect(validate(entity)).resolves.toBeEmptyArray();
});
}
});
});