File: unsafe_base.xml

package info (click to toggle)
feedparser 6.0.12-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 10,540 kB
  • sloc: xml: 11,459; python: 4,575; makefile: 7
file content (10 lines) | stat: -rw-r--r-- 486 bytes parent folder | download | duplicates (3) 
1
2
3
4
5
6
7
8
9
10
 
<!--
SkipUnless:  feedparser.ACCEPTABLE_URI_SCHEMES
Description: xml:base is unsafe (uses unacceptable URI protocol)
Expect:      not bozo and entries[0]['title_detail']['base'] == 'http://example.com/'
-->
<feed version="0.3" xmlns="http://purl.org/atom/ns#">
<entry xml:base="http://example.com/">
  <title type="application/xhtml+xml" xml:base="javascript:alert('unsafe')"><div xmlns="http://www.w3.org/1999/xhtml">Example <a href="test.html">test</a></div></title>
</entry>
</feed>