From 72684085cf3a0ea32d56a4c78cac50f6494f6fdc Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 24 Jun 2021 09:55:23 +0200 Subject: [PATCH] Bug 28409: Adjust regression test We are no longer expecting an URI escaped value but a corrected category value, either 1 or 2. Signed-off-by: Victor Grousset/tuxayo --- t/db_dependent/selenium/regressions.t | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/t/db_dependent/selenium/regressions.t b/t/db_dependent/selenium/regressions.t index c823774806..a6cbfe551a 100644 --- a/t/db_dependent/selenium/regressions.t +++ b/t/db_dependent/selenium/regressions.t @@ -254,7 +254,7 @@ subtest 'XSS vulnerabilities in pagination' => sub { is( $alert_text, undef, 'No alert box displayed, even if evil intent' ); my $second_page = $driver->find_element('//div[@class="pages"]/span[@class="currentPage"]/following-sibling::a'); - like( $second_page->get_attribute('href'), qr{category=2%22%3E%3Cscript%3Ealert%28%27booh%21%27%29%3C%2Fscript%3E}, 'The second page should display the variables and attributes correctly URI escaped' ); + like( $second_page->get_attribute('href'), qr{(?|&)category=2(&|$)}, 'The second page should display category without the invalid value' ); push @cleanup, $patron, $patron->category, $patron->library; -- 2.20.1