Test for script tag inside style

Reproducer for #83.
bgalek · Sep 13, 2024 · 1bb95b7 · 1bb95b7
1 parent cba2904
commit 1bb95b7
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/src/test/java/com/github/bgalek/security/SvgSecurityValidatorTest.java b/src/test/java/com/github/bgalek/security/SvgSecurityValidatorTest.java
@@ -126,6 +126,7 @@ private static Stream<Arguments> evilUseCases() {
                 Arguments.of("hacked/with-onclick-attribute.svg", "onclick"),
                 Arguments.of("hacked/with-script-tag.svg", "script"),
                 Arguments.of("hacked/with-script-tag-in-styles.svg", "script"),
+                Arguments.of("hacked/with-invalid-script-tag-in-styles.svg", "script"),
                 Arguments.of("hacked/with-css-url-syntax.svg", "style"),
                 Arguments.of("hacked/with-xlink-injection.svg", "script")
         );

diff --git a/src/test/resources/hacked/with-invalid-script-tag-in-styles.svg b/src/test/resources/hacked/with-invalid-script-tag-in-styles.svg