projects / catagits/Catalyst-Action-Serialize-Data-Serializer.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw
Added fix for RT 63537 (from Gerv) and tests to check it.
[catagits/Catalyst-Action-Serialize-Data-Serializer.git] / t / yaml-html.t
diff --git a/t/yaml-html.t b/t/yaml-html.t
index a77f085..bf9bf10 100644 (file)
--- a/t/yaml-html.t
+++ b/t/yaml-html.t
@@ -28,6 +28,14 @@ SKIP: {
       request( $t->post( url => '/monkey_put', data => Dump($post_data) ) );
     ok( $mres_post->is_error, "POST to the monkey failed; no deserializer." );
 
+    # xss test - RT 63537
+    my $xss_template =
+"<html><title>Test::Serialize</title><body><pre>--- \nmonkey: likes chicken &gt; sushi!\n</pre></body></html>";
+    my $xres = request( $t->get( url => '/xss_get' ) );
+    ok( $xres->is_success, 'GET the xss succeeded' );
+    is( $xres->content, $xss_template, "GET returned the right data" );
+
+
 }
 1;
 
git://git.shadowcat.co.uk:catagits/Catalyst-Action-Serialize-Data-Serializer