mirror of
https://github.com/jquery/jquery.git
synced 2024-11-23 02:54:22 +00:00
b14b62c8a2
Only allow alphanumeric characters & underscores for callback parameters.
The change is done both for the PHP server as well as the Node.js-based version.
This is only test code so we're not fixing any security issue but it happens
often enough that the whole jQuery repository directory structure is deployed
onto the server with PHP enabled that it makes is easy to introduce security
issues if this cleanup is not done.
Ref gh-4764
Closes gh-4871
(cherry picked from
|
||
|---|---|---|
| .. | ||
| data | ||
| integration | ||
| node_smoke_tests | ||
| promises_aplus_adapters | ||
| unit | ||
| .eslintrc.json | ||
| delegatetest.html | ||
| hovertest.html | ||
| index.html | ||
| jquery.js | ||
| karma.context.html | ||
| karma.debug.html | ||
| localfile.html | ||
| middleware-mockserver.js | ||
| networkerror.html | ||
| xhtml.php | ||