8000 fix(test): move xss test from 942180 to 941330 by fzipi · Pull Request #4012 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix(test): move xss test from 942180 to 941330 #4012

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

fzipi
Copy link
Member
@fzipi fzipi commented Feb 24, 2025

what

  • move test wrongfully matching 942180 to 941330

why

  • test is targeted to match xss not sqli

references

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
@fzipi fzipi added the release:ignore Ignore for changelog release label Feb 24, 2025
@fzipi fzipi requested a review from theseion February 24, 2025 00:44
fzipi and others added 2 commits February 24, 2025 07:40
@fzipi fzipi enabled auto-merge February 24, 2025 10:40
@fzipi fzipi requested a review from theseion February 24, 2025 10:40
@theseion
Copy link
Contributor
8000

Looks good but tests are failing.

@fzipi fzipi force-pushed the tests/942180-fix-test branch from a2c4db5 to acb8e1b Compare February 24, 2025 16:29
Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>
@@ -36,3 +36,20 @@ tests:
output:
log:
expect_ids: [941330]
- test_id: 3
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is the wrong rule for the test. 941330 is "IE XSS filter" and the regex will never match anything that looks like the payload in this test. Rather 941210 maybe.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release:ignore Ignore for changelog release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants
0