$value = Xss::filterAdmin('<style /><iframe /><frame /><frameset /><meta /><link /><embed /><applet /><param /><layer />');

Embed: Deprecated. Embeds an application in a document
Applet: Deprecated. Specifies an applet

File path: core/tests/Drupal/Tests/Component/Utility/XssTest.php

CommentFileSizeAuthor
#3 3213177-3.patch825 bytesguilhermevp

Comments

Gauravmahlawat created an issue. See original summary.

spokje’s picture

spokje
Primary language Dutch
commented
Issue summary: View changes
guilhermevp’s picture

guilhermevp commented
Status: Active » Needs review
StatusFileSize
new 3213177-3.patch825 bytes

Sending patch, please review.

mitthukumawat’s picture

mitthukumawat commented

Patch #3 applied cleanly and it removed the and tags from tests.

longwave’s picture

longwave
he/him
Primary language English
Location UK
commented

To me this is won't fix, the point of this test is to ensure these tags are correctly filtered for security and we should not be removing things from a test just because the tag is deprecated - that won't stop someone trying to use it somewhere.

gauravvvv’s picture

gauravvvv commented

@longwave, You can close this issue. thanks

longwave’s picture

longwave
he/him
Primary language English
Location UK
commented
Status: Needs review » Closed (won't fix)