]> source.dussan.org Git - jquery.git/commit
Tests: Strip untypical callback parameter characters from mock.php
authorMichał Gołębiowski-Owczarek <m.goleb@gmail.com>
Tue, 13 Apr 2021 20:13:48 +0000 (22:13 +0200)
committerMichał Gołębiowski-Owczarek <m.goleb@gmail.com>
Tue, 13 Apr 2021 20:36:19 +0000 (22:36 +0200)
commitb14b62c8a28af396e20e7234086926f393dd314a
tree8786f3a0409359b2c55d9a41d526dfecd3802434
parent3642471ec5b6716ce96c2560eadc3f7470f8df56
Tests: Strip untypical callback parameter characters from mock.php

Only allow alphanumeric characters & underscores for callback parameters.
The change is done both for the PHP server as well as the Node.js-based version.
This is only test code so we're not fixing any security issue but it happens
often enough that the whole jQuery repository directory structure is deployed
onto the server with PHP enabled that it makes is easy to introduce security
issues if this cleanup is not done.

Ref gh-4764
Closes gh-4871

(cherry picked from a70274632dc19ff4a64d7bb7657a2cc647ff38b9)
test/data/mock.php
test/middleware-mockserver.js