[+]: added test for "<img src =x onerror= ..."

voku · Jun 17, 2015 · bc003bf · bc003bf
1 parent 97afa71
commit bc003bf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tests/XssTest.php b/tests/XssTest.php
@@ -83,6 +83,7 @@ public function testXssClean()
       "<IMG defang_SRC=javascript:alert\(&quot;XSS&quot;\)>" => "<IMG >", // IMG
       "<IMG SRC=javascript:alert(&quot;XSS&quot;)>" => "<IMG >",
       "<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>" => "<IMG >",
+      "<img src =x onerror=confirm(document.cookie);>" => "<img >",
       "<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>" => "<IMG >",
       "<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>" => "<IMG >",
       "<IMG SRC=\"jav	ascript:alert('XSS');\">" => "<IMG >",