Merge pull request #86 from slovdahl/script-tag-in-style

Test for script tag inside style
bgalek · Sep 16, 2024 · 62f59b5 · 62f59b5
2 parents 00546f7 + 79837a6
commit 62f59b5
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/src/test/java/com/github/bgalek/security/SvgSecurityValidatorTest.java b/src/test/java/com/github/bgalek/security/SvgSecurityValidatorTest.java
@@ -126,6 +126,7 @@ private static Stream<Arguments> evilUseCases() {
                 Arguments.of("hacked/with-onclick-attribute.svg", "onclick"),
                 Arguments.of("hacked/with-script-tag.svg", "script"),
                 Arguments.of("hacked/with-script-tag-in-styles.svg", "script"),
+                Arguments.of("hacked/with-invalid-script-tag-in-styles.svg", "script"),
                 Arguments.of("hacked/with-css-url-syntax.svg", "style"),
                 Arguments.of("hacked/with-xlink-injection.svg", "script")
         );

diff --git a/src/test/resources/hacked/with-invalid-script-tag-in-styles.svg b/src/test/resources/hacked/with-invalid-script-tag-in-styles.svg