Project

General

Profile

Download (1.43 KB)

Defect #35441 » 35441-v2.patch

Go MAEDA, 2021-07-24 08:59

View differences:

lib/redmine/wiki_formatting/textile/redcloth3.rb
961 961 
            href, alt_title = check_refs( href ) if href
962 962 
            url, url_title = check_refs( url )
963 963 

  		




  964
  
  
    
            next m unless uri_with_safe_scheme?(url)

  		




  
  964
  
    
            next m unless uri_with_safe_scheme?(url.partition('?').first)

  		




  965
  965
  
    
            if href

  		




  966
  966
  
    
              href = htmlesc(href.dup)

  		




  967
  967
  
    
              next m if href.downcase.start_with?('javascript:')

  		












  

    
      test/helpers/application_helper_test.rb
    
  





  150
  150
  
    
      'with title !http://foo.bar/image.jpg(This is a double-quoted "title")!' =>

  		




  151
  151
  
    
        'with title <img src="http://foo.bar/image.jpg" title="This is a double-quoted &quot;title&quot;" ' \

  		




  152
  152
  
    
          'alt="This is a double-quoted &quot;title&quot;" />',

  		




  
  153
  
    
      'with query string !http://foo.bar/image.cgi?a=1&b=2!' =>

  		




  
  154
  
    
        'with query string <img src="http://foo.bar/image.cgi?a=1&#38;b=2" alt="" />'

  		




  153
  155
  
    
    }

  		




  154
  156
  
    
    to_test.each {|text, result| assert_equal "<p>#{result}</p>", textilizable(text)}

  		




  155
  157
  
    
  end

  		















  (3-3/3)