mirror of
https://github.com/TracksApp/tracks.git
synced 2026-01-02 15:28:50 +01:00
Upgraded to Rails 2.1. This can have wide ranging consequences, so please help track down any issues introduced by the upgrade. Requires environment.rb modifications.
Changes you will need to make: * In your environment.rb, you will need to update references to a few files per environment.rb.tmpl * In your environment.rb, you will need to specify the local time zone of the computer that is running your Tracks install. Other notes on my changes: * Modified our code to take advantage of Rails 2.1's slick time zone support. * Upgraded will_paginate for compatibility * Hacked the Selenium on Rails plugin, which has not been updated in some time and does not support Rails 2.1 * Verified that all tests pass on my machine, including Selenium tests -- I'd like confirmation from others, too.
This commit is contained in:
parent
f3bae73868
commit
901a58f8a3
1086 changed files with 51452 additions and 19526 deletions
|
|
@ -1,5 +1,4 @@
|
|||
require File.dirname(__FILE__) + '/../../abstract_unit'
|
||||
require 'test/unit'
|
||||
require 'abstract_unit'
|
||||
|
||||
class SanitizerTest < Test::Unit::TestCase
|
||||
def setup
|
||||
|
|
@ -203,6 +202,12 @@ class SanitizerTest < Test::Unit::TestCase
|
|||
assert_equal expected, sanitize_css(raw)
|
||||
end
|
||||
|
||||
def test_should_sanitize_with_trailing_space
|
||||
raw = "display:block; "
|
||||
expected = "display: block;"
|
||||
assert_equal expected, sanitize_css(raw)
|
||||
end
|
||||
|
||||
def test_should_sanitize_xul_style_attributes
|
||||
raw = %(-moz-binding:url('http://ha.ckers.org/xssmoz.xml#xss'))
|
||||
assert_equal '', sanitize_css(raw)
|
||||
|
|
@ -235,16 +240,20 @@ class SanitizerTest < Test::Unit::TestCase
|
|||
end
|
||||
|
||||
def test_should_sanitize_img_vbscript
|
||||
assert_sanitized %(<img src='vbscript:msgbox("XSS")' />), '<img />'
|
||||
assert_sanitized %(<img src='vbscript:msgbox("XSS")' />), '<img />'
|
||||
end
|
||||
|
||||
protected
|
||||
def assert_sanitized(input, expected = nil)
|
||||
@sanitizer ||= HTML::WhiteListSanitizer.new
|
||||
assert_equal expected || input, @sanitizer.sanitize(input)
|
||||
if input
|
||||
assert_dom_equal expected || input, @sanitizer.sanitize(input)
|
||||
else
|
||||
assert_nil @sanitizer.sanitize(input)
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
def sanitize_css(input)
|
||||
(@sanitizer ||= HTML::WhiteListSanitizer.new).sanitize_css(input)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue