]> source.dussan.org Git - jquery.git/commit
Tests: Strip untypical callback parameter characters from PHP files 1.12-stable 5007/head
authorMichał Gołębiowski-Owczarek <m.goleb@gmail.com>
Thu, 29 Apr 2021 16:27:58 +0000 (18:27 +0200)
committerMichał Gołębiowski-Owczarek <m.goleb@gmail.com>
Thu, 29 Apr 2021 16:38:11 +0000 (18:38 +0200)
commit90a3c439828e21e291b65d4dfc1da6774d611aaa
treeda3df21aa4db812dd79ea0771af68c5deeed262f
parente09907ce152fb6ef7537a3733b1d65ead8ee6303
Tests: Strip untypical callback parameter characters from PHP files

Only allow alphanumeric characters & underscores for callback parameters.
This is only test code so we're not fixing any security issue but it happens
often enough that the whole jQuery repository directory structure is deployed
onto the server with PHP enabled that it makes is easy to introduce security
issues if this cleanup is not done.

This is a 1.x/2.x version of PR gh-4871.

The change doesn't require a release; it's meant at installations testing
the latest state of `1.12-stable` & `2.2-stable` branches.

This change also fixes testing on Travis & on Chrome/Firefox.

Closes gh-4875
Ref gh-4764
Ref gh-4871

(cherry picked from acb7c49c8d42f601fa347661b1118959079f6b52)
.travis.yml
test/data/jsonp.php
test/data/with_fries_over_jsonp.php
test/unit/ajax.js
test/unit/support.js