jquery-ui/tests
Michał Gołębiowski-Owczarek 85bed8ddd8
Build: Fix an XSS in the test server HTML serving logic
The test server has a rule for `/tests/unit/*/*.html` paths that serves
a proper local file. However, the parameters after `/unit/` so far accepted
many characters that have special meaning, leading to possibly reading a file
from outside of the Git repository. Fix that by only accepting alphanumeric
characters, `-` or `_`.

This should resolve one CodeQL alert.

Closes gh-2309
2024-10-28 16:47:29 +01:00
..
images All: Optimize png images losslessly using zopflipng 2016-06-06 11:26:06 -04:00
lib Tests: Properly check $.uiBackCompat in common widget tests 2024-09-09 17:52:53 +02:00
runner Build: Fix an XSS in the test server HTML serving logic 2024-10-28 16:47:29 +01:00
unit Tabs: Use CSS.escape for sanitizing selectors 2024-10-27 00:04:00 +02:00
visual Demos: Remove deprecated button APIs 2024-09-30 18:05:22 +02:00
.eslintrc.json Build: Migrate from JSHint & JSCS to ESLint 2021-06-07 00:58:12 +02:00
index.css Theme: Change default widget font-size to 1em 2014-10-24 07:23:31 -07:00
index.html Tests: replace grunt-contrib-qunit with jQuery test runner 2024-03-29 09:13:46 -04:00
index.js Tests: Style updates 2015-08-21 08:06:24 -04:00