mirror of
https://github.com/wahyd4/gitlabhq.git
synced 2026-08-11 05:36:07 +10:00
Robert SpeicherandYorick Peterse
3b83ed2125
Prevent XSS via custom issue tracker URL Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/15437 See merge request !1955
8 lines
367 B
Ruby
8 lines
367 B
Ruby
RSpec.shared_examples 'issue tracker service URL attribute' do |url_attr|
|
|
it { is_expected.to allow_value('https://example.com').for(url_attr) }
|
|
|
|
it { is_expected.not_to allow_value('example.com').for(url_attr) }
|
|
it { is_expected.not_to allow_value('ftp://example.com').for(url_attr) }
|
|
it { is_expected.not_to allow_value('herp-and-derp').for(url_attr) }
|
|
end
|