new updates
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
|
||||
use Illuminate\Support\Facades\View;
|
||||
use Klevze\ControlPanel\Facades\ActiveLanguage;
|
||||
use Klevze\ControlPanel\Core\SecurityHelper;
|
||||
use cPad\Plugins\Blocks\Controllers\BlockController;
|
||||
|
||||
it('renders decoded html in the block editor form', function () {
|
||||
@@ -78,3 +79,13 @@ it('renders frontend language tabs in the block editor', function () {
|
||||
expect($html)->toContain('English');
|
||||
expect($html)->toContain('Slovenian');
|
||||
});
|
||||
|
||||
it('preserves iframe query parameters while removing actual event attributes', function () {
|
||||
$html = '<iframe src="https://player.mediadelivery.net/embed/641915/946cd284-5122-47b9-8817-831463b78829?autoplay=true&loop=true&muted=true&preload=true&responsive=true" onload="alert(1)"></iframe>';
|
||||
|
||||
$sanitized = SecurityHelper::sanitizeInput($html);
|
||||
|
||||
expect($sanitized)->toContain('responsive=true');
|
||||
expect($sanitized)->not->toContain('resptrue');
|
||||
expect($sanitized)->not->toContain('onload=');
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user