Merge branch 'master' into Fix-cross-site-scripting-for-codeql

zkoss · Aug 28, 2024 · 63d9846 · 63d9846
2 parents e9a48b6 + d0a87d4
commit 63d9846
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/zktest/src/main/webapp/test2/B50-ZK-676_1.zul b/zktest/src/main/webapp/test2/B50-ZK-676_1.zul
@@ -0,0 +1,8 @@
+<zk>
+	<zscript><![CDATA[
+		String str = "abc\"><script></script><!--";
+	]]></zscript>
+	<div id="div" style="color: #009900" tooltiptext="${str}">abc</div>
+	<div id="div2" style="color: #009900" tooltiptext="${str}">def</div>
+	<div id="div3" style="color: #009900" tooltiptext="${str}">ghi</div>
+</zk>