xss-test-gem 0.2.2 → 0.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. checksums.yaml +2 -2
  2. metadata +11 -7
checksums.yaml CHANGED
@@ -1,4 +1,4 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ca5a5516789f01aed293fa6a4d4f486a6169962194a7863964eb4ac5720a5adf
4
- data.tar.gz: c1132c93d805239179d09906c7ab5a5522813bd8f3f51f2dcf6519b5091d66ec
3
+ metadata.gz: ba000cbf3a59b9d53568043786511f8c0ebdd84abfe2a9d5d952d8a87cae19da
4
+ data.tar.gz: d06b809acfabed1d55da99ef8460fc3524e89e2e01695832488cee2ad3e31412
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: xss-test-gem
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.2
4
+ version: 0.2.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Testing Buffalo
@@ -9,17 +9,21 @@ email: testingbuffalo@apexblack.org
9
9
  homepage: https://rubygems.org/gems/xss-test-gem
10
10
  licenses:
11
11
  - MIT
12
- summary: Data URI tests
12
+ summary: Protocol handling tests
13
13
  description: |
14
- == Data URI and Protocol Tests
14
+ == Protocol Handling Tests
15
15
 
16
- Data URI image: {image}[data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" onload="alert(1)"></svg>]
16
+ Bare data URL: data:image/svg+xml,<svg onload=alert(1)></svg>
17
17
 
18
- SVG data URI: {image}[data:image/svg+xml;base64,PHN2ZyBvbmxvYWQ9YWxlcnQoMSk+PC9zdmc+]
18
+ Bare FTP URL: ftp://evil.com/malware.exe
19
19
 
20
- FTP image: {image}[ftp://evil.com/test.jpg]
20
+ Bare file URL: file:///etc/passwd
21
21
 
22
- File protocol: {image}[file:///etc/passwd]
22
+ Bare javascript URL: javascript:alert(1)
23
+
24
+ Image with data src: <img src="data:image/svg+xml,<svg onload=alert(1)>">
25
+
26
+ HTML img: <img src="https://evil.com/x.jpg">
23
27
 
24
28
  required_ruby_version: !ruby/object:Gem::Requirement
25
29
  requirements: