Diff options
Diffstat (limited to 'tests/t0301-security.sh')
| -rwxr-xr-x | tests/t0301-security.sh | 12 |
1 file changed, 0 insertions, 12 deletions
diff --git a/tests/t0301-security.sh b/tests/t0301-security.sh index 870d2c5..6ea8d45 100755 --- a/tests/t0301-security.sh +++ b/tests/t0301-security.sh @@ -104,18 +104,6 @@ test_expect_success 'non-markdown readme without a filter is escaped as plain te test_grep ! "<script>alert(2)</script>" tmp ' -# root-readme is the site's own file rather than repository content, so it -# goes out as written, on an about page of its own. -test_expect_success 'root-readme without a filter is its own page, as written' ' - echo "<b>site</b>" >root.html && - cgitrc_site secrootrc "root-readme=$PWD/root.html" && - cgit_rc secrootrc "url=" >tmp && - grep "<li><a title=.About this site. href=./?p=about.>about</a>" tmp && - ! grep "<b>site</b>" tmp && - cgit_rc secrootrc "p=about" >tmp && - grep "^<b>site</b>$" tmp -' - # A Content-Security-Policy without unsafe-inline stops an inline onchange # handler from ever running, so the option form submits through a plain # button and its selects carry no handlers at all, and nor does any other |