From bbf6d587b8c4fee3312e4056af9e0a3c9c78be8f Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 24 Jun 2021 09:55:23 +0200 Subject: [PATCH] Bug 28409: Adjust regression test We are no longer expecting an URI escaped value but a corrected category value, either 1 or 2. Signed-off-by: Victor Grousset/tuxayo (cherry picked from commit 9aef1ef5a52527bafe1e3663d0e645d01d086599) Signed-off-by: Wainui Witika-Park (cherry picked from commit 9aef1ef5a52527bafe1e3663d0e645d01d086599) --- t/db_dependent/selenium/regressions.t | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/t/db_dependent/selenium/regressions.t b/t/db_dependent/selenium/regressions.t index b0f6555620..af33eec92a 100644 --- a/t/db_dependent/selenium/regressions.t +++ b/t/db_dependent/selenium/regressions.t @@ -237,7 +237,7 @@ subtest 'XSS vulnerabilities in pagination' => sub { is( $alert_text, undef, 'No alert box displayed, even if evil intent' ); my $second_page = $driver->find_element('//div[@class="pages"]/span[@class="currentPage"]/following-sibling::a'); - like( $second_page->get_attribute('href'), qr{category=2%22%3E%3Cscript%3Ealert%28%27booh%21%27%29%3C%2Fscript%3E}, 'The second page should display the variables and attributes correctly URI escaped' ); + like( $second_page->get_attribute('href'), qr{(?|&)category=2(&|$)}, 'The second page should display category without the invalid value' ); push @cleanup, $patron, $patron->category, $patron->library; -- 2.39.5