Changeset 42770 for trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php

Timestamp:

03/02/2018 02:41:04 PM (7 years ago)

Author:

azaozz

Message:

Add pre-save content filter to make target=_blank always secure.

Props notnownikki, iseulde, azaozz
Fixes #43187

File:

• trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php (modified) (1 diff)

trunk/tests/phpunit/tests/rest-api/rest-attachments-controller.php

@@ -1016 +1016 @@
                     ),
                     'description' => array(
-                        'raw'      => '<a href="#" target="_blank">link</a>',
-                        'rendered' => '<p><a href="#" target="_blank">link</a></p>',
+                        'raw'      => '<a href="#" target="_blank" rel="noopener noreferrer">link</a>',
+                        'rendered' => '<p><a href="#" target="_blank" rel="noopener noreferrer">link</a></p>',
                     ),
                     'caption'     => array(
-                        'raw'      => '<a href="#" target="_blank">link</a>',
-                        'rendered' => '<p><a href="#" target="_blank">link</a></p>',
+                        'raw'      => '<a href="#" target="_blank" rel="noopener noreferrer">link</a>',
+                        'rendered' => '<p><a href="#" target="_blank" rel="noopener noreferrer">link</a></p>',
                     ),
                 ),