-
-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Restore inner span tag to form inputs legend #8467
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Restore inner span tag to form inputs legend #8467
Conversation
end | ||
|
||
context "with XSS payload as name" do | ||
let :body do | ||
build_form do |f| | ||
f.inputs name: '<script>alert(document.domain)</script>' do | ||
f.inputs name: "<script>alert(document.domain)</script>" do |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is an un-related change made by rubocop run by my IDE when the file was saved
LGTM, thanks! I don't have problems with the rubocop extra fix. Let's wait @javierjulio approval |
@denisahearn don't worry about the failing test. #8468 is required to fix them |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
@denisahearn I merged the PR. Can you rebase your branch with 3-0-stable? |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## 3-0-stable #8467 +/- ##
=============================================
Coverage ? 99.19%
=============================================
Files ? 194
Lines ? 4965
Branches ? 0
=============================================
Hits ? 4925
Misses ? 40
Partials ? 0 ☔ View full report in Codecov by Sentry. |
@mgrunberg Thanks! |
Fixes the issue described here: #8466
Closes #8466