jquery-ui/tests/runner
Michał Gołębiowski-Owczarek 85bed8ddd8
Build: Fix an XSS in the test server HTML serving logic
The test server has a rule for `/tests/unit/*/*.html` paths that serves
a proper local file. However, the parameters after `/unit/` so far accepted
many characters that have special meaning, leading to possibly reading a file
from outside of the Git repository. Fix that by only accepting alphanumeric
characters, `-` or `_`.

This should resolve one CodeQL alert.

Closes gh-2309
2024-10-28 16:47:29 +01:00
..
browserstack Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
flags All: Stop relying on jquery-patch.js internally, add tests 2024-05-15 00:38:40 +02:00
lib Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
selenium Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
.eslintrc.json Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
browsers.js Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
command.js Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
createTestServer.js Build: Fix an XSS in the test server HTML serving logic 2024-10-28 16:47:29 +01:00
listeners.js Tests: replace grunt-contrib-qunit with jQuery test runner 2024-03-29 09:13:46 -04:00
package.json Tests: replace grunt-contrib-qunit with jQuery test runner 2024-03-29 09:13:46 -04:00
queue.js Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
reporter.js Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
run.js Tests: align test runner with other repos 2024-04-09 13:31:27 -04:00
server.js Tests: replace grunt-contrib-qunit with jQuery test runner 2024-03-29 09:13:46 -04:00