8000 Add integration tests for nl2br jinja2 filter by legoktm · Pull Request #7546 · freedomofpress/securedrop · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Add integration tests for nl2br jinja2 filter #7546

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails 8000 .

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 13, 2025
Merged

Conversation

legoktm
Copy link
Member
@legoktm legoktm commented May 9, 2025

Status

Ready for review

Description of Changes

Explicitly verify the basic behavior of turning \n into <br> and then the escaping of HTML elements, so XSS isn't possible through it.

The test cases were originally written by Claude (transcript), I adjusted them to reuse our existing environment to make it more of a true integration test.

Testing

How should the reviewer test this PR?

  • CI passes

Deployment

Any special considerations for deployment? n/a

Explicitly verify the basic behavior of turning `\n` into `<br>` and
then the escaping of HTML elements, so XSS isn't possible through it.
@legoktm legoktm requested a review from a team as a code owner May 9, 2025 21:13
@legoktm legoktm moved this to Ready For Review in SecureDrop May 9, 2025
Copy link
Contributor
@zenmonkeykstop zenmonkeykstop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@zenmonkeykstop zenmonkeykstop added this pull request to the merge queue May 13, 2025
Merged via the queue into develop with commit 96b4717 May 13, 2025
54 of 55 checks passed
@github-project-automation github-project-automation bot moved this from Ready For Review to Done in SecureDrop May 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Stat 439D us: Done
Development

Successfully merging this pull request may close these issues.

2 participants
0