mirror of
https://github.com/discourse/discourse.git
synced 2025-06-13 17:11:20 +08:00
quoting fixes
- allow bbcode quotes to be nested - don't allow the '=' to be omitted from quotes - fix some css that made assumptions about nested quotes
This commit is contained in:
@ -99,7 +99,7 @@ test("quotes", function() {
|
||||
"<aside class=\"quote\"><blockquote><p><em>test</em></p></blockquote></aside>",
|
||||
"it doesn't insert a new line for italics");
|
||||
|
||||
format("[quote,script='a'><script>alert('test');//':a][/quote]",
|
||||
format("[quote=,script='a'><script>alert('test');//':a][/quote]",
|
||||
"<aside class=\"quote\" data-script='a'><script>alert('test');//'=\"a\"><blockquote></blockquote></aside>",
|
||||
"It will not create a script tag within an attribute");
|
||||
});
|
||||
|
Reference in New Issue
Block a user