Active
Project:
Drupal core
Version:
main
Component:
javascript
Priority:
Major
Category:
Plan
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
7 Aug 2015 at 10:09 UTC
Updated:
1 May 2021 at 05:39 UTC
Jump to comment: Most recent
Some JS is security-sensitive — or even contained XSS bugs at some point — yet we cannot write regression tests for them because we don't have JavaScript testing infrastructure.
Write test coverage for them as soon as we have the necessary infrastructure.
Write test coverage for:
#2503963: XSS in Quick Edit: entity title is not safely encoded
Comments
Comment #10
nod_We have the infrastructure now? still relevant or we fixed it along the way?