add non-spread test for attribute safety

pull/1623/head
Rich Harris 6 years ago
parent 630bc5cbb9
commit e937060de2

@ -0,0 +1,4 @@
<div
foo="&#34;></div><script>alert(42)</script>"
bar="&#39;></div><script>alert(42)</script>"
></div>

@ -0,0 +1,16 @@
<div {...props}></div>
<script>
export default {
data() {
return {
props: {
foo: '"></div><script>alert(42)</' + 'script>',
bar: "'></div><script>alert(42)</" + 'script>',
['"></div><script>alert(42)</' + 'script>']: 'baz'
}
};
}
};
</script>

@ -1,4 +1,3 @@
<div
foo="&#34;></div><script>alert(42)</script>"
bar="&#39;></div><script>alert(42)</script>"
></div>

@ -1,15 +1,11 @@
<div {...props}></div>
<div foo={foo}></div>
<script>
export default {
data() {
return {
props: {
foo: '"></div><script>alert(42)</' + 'script>',
bar: "'></div><script>alert(42)</" + 'script>',
['"></div><script>alert(42)</' + 'script>']: 'baz'
}
foo: '"></div><script>alert(42)</' + 'script>'
};
}
};

Loading…
Cancel
Save