Michał Gołębiowski-Owczarek a70274632d Tests: Strip untypical callback parameter characters from mock.php ...

Only allow alphanumeric characters & underscores for callback parameters.
The change is done both for the PHP server as well as the Node.js-based version.
This is only test code so we're not fixing any security issue but it happens
often enough that the whole jQuery repository directory structure is deployed
onto the server with PHP enabled that it makes is easy to introduce security
issues if this cleanup is not done.

Ref gh-4764
Closes gh-4871

2021-04-13 22:13:48 +02:00

..

ajax

Tests: Add support for running unit tests via grunt with karma

2017-12-18 12:27:38 -05:00

core

Build: Take core-js-bundle from the external directory as well

2021-04-13 22:10:09 +02:00

css

CSS: Correctly detect scrollbox support with non-default zoom

2018-05-07 09:28:18 -04:00

data

Tests: Refactor testIframe() to make it DRYer and more consistent

2016-04-11 13:32:51 -04:00

dimensions

Tests: Refactor testIframe() to make it DRYer and more consistent

2016-04-11 13:32:51 -04:00

event

Tests: Add support for running unit tests via grunt with karma

2017-12-18 12:27:38 -05:00

manipulation

Core: Fire iframe script in its context, add doc param in globalEval

2020-02-10 19:17:22 +01:00

offset

Build:Tests: Fix custom build tests, verify on Travis

2020-01-07 23:59:08 +01:00

selector

Tests: Stop using jQuery.find in tests

2019-10-21 19:02:22 +02:00

support

Tests: Add support for running unit tests via grunt with karma

2017-12-18 12:27:38 -05:00

1x1.jpg

Fixes #11426: getting the responseText of an xhr should be tried/caught because of IE's inability to give access to binary data. Unit test added.

2012-03-07 15:39:39 +01:00

1x1.svg

Traversing: $.fn.contents() support for object

2018-05-14 13:41:42 -04:00

badcall.js

Revert "Organizes the php scripts used for testing better, so that the whole logic of a unit, server-side and client-side, is contained within the unit itself. Nearly all ajax unit tests take advantage of the new 'framework'. Lots of files got deleted because they became redundant or weren't used anymore."

2012-12-05 14:54:14 +01:00

badjson.js

Revert "Organizes the php scripts used for testing better, so that the whole logic of a unit, server-side and client-side, is contained within the unit itself. Nearly all ajax unit tests take advantage of the new 'framework'. Lots of files got deleted because they became redundant or weren't used anymore."

2012-12-05 14:54:14 +01:00

cleanScript.html

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

csp-ajax-script-downloaded.js

Ajax: Avoid CSP errors in the script transport for async requests

2020-08-25 21:28:30 +02:00

csp-ajax-script.html

Ajax: Avoid CSP errors in the script transport for async requests

2020-08-25 21:28:30 +02:00

csp-ajax-script.js

Ajax: Avoid CSP errors in the script transport for async requests

2020-08-25 21:28:30 +02:00

csp-nonce-external.html

Core: Preserve CSP nonce on scripts with src attribute in DOM manipulation

2019-03-25 18:14:24 +01:00

csp-nonce-external.js

Core: Preserve CSP nonce on scripts with src attribute in DOM manipulation

2019-03-25 18:14:24 +01:00

csp-nonce-globaleval.html

Core: Support passing nonce through jQuery.globalEval

2019-01-21 18:42:39 +01:00

csp-nonce-globaleval.js

Core: Support passing nonce through jQuery.globalEval

2019-01-21 18:42:39 +01:00

csp-nonce.html

Core: Preserve CSP nonce on scripts in DOM manipulation

2019-01-14 19:29:54 +01:00

csp-nonce.js

Core: Preserve CSP nonce on scripts in DOM manipulation

2019-01-14 19:29:54 +01:00

csp.include.html

Tests: Add support for running unit tests via grunt with karma

2017-12-18 12:27:38 -05:00

dashboard.xml

Revert "Organizes the php scripts used for testing better, so that the whole logic of a unit, server-side and client-side, is contained within the unit itself. Nearly all ajax unit tests take advantage of the new 'framework'. Lots of files got deleted because they became redundant or weren't used anymore."

2012-12-05 14:54:14 +01:00

frame.html

Traversing: $.fn.contents() support for object

2018-05-14 13:41:42 -04:00

iframe.html

Fix indentation in /speed and /test dirs, closes gh-780.

2012-05-18 13:28:50 -04:00

iframeTest.js

Tests: Improve offset test setup and labels

2017-04-24 21:44:51 -04:00

inner_module.js

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

inner_nomodule.js

Core: Remove IE-specific support tests, rely on document.documentMode

2019-05-13 21:39:56 +02:00

jquery-1.9.1.js

Event: fix incorrect test

2015-10-12 18:37:04 +03:00

json_obj.js

Revert "Organizes the php scripts used for testing better, so that the whole logic of a unit, server-side and client-side, is contained within the unit itself. Nearly all ajax unit tests take advantage of the new 'framework'. Lots of files got deleted because they became redundant or weren't used anymore."

2012-12-05 14:54:14 +01:00

mock.php

Tests: Strip untypical callback parameter characters from mock.php

2021-04-13 22:13:48 +02:00

module.js

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

name.html

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

nomodule.js

Core: Remove IE-specific support tests, rely on document.documentMode

2019-05-13 21:39:56 +02:00

qunit-fixture.html

Selector: Make empty attribute selectors work in IE again

2019-11-18 22:10:55 +01:00

readywait.html

Tests: move readywait to an iframe test

2017-03-20 11:37:15 -04:00

test2.html

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

test3.html

Core: rnotwhite -> rhtmlnotwhite and jQuery.trim -> stripAndCollapse

2016-09-15 10:40:27 -04:00

test.include.html

Build: Update test code for compatibility with QUnit 2.x (#4297)

2019-02-18 19:03:26 +01:00

testinit-jsdom.js

Build: Make Karma work in ES modules mode

2019-12-16 19:33:49 +01:00

testinit.js

Manipulation: Make jQuery.htmlPrefilter an identity function

2020-03-16 21:49:29 +01:00

testrunner.js

Tests: Remove remaining obsolete jQuery.cache references

2020-05-18 18:43:01 +02:00

testsuite.css

Docs: Update most URLs to HTTPS

2019-10-21 19:03:48 +02:00

text.txt

Tests: Add support for running unit tests via grunt with karma

2017-12-18 12:27:38 -05:00

with_fries.xml

Revert "Organizes the php scripts used for testing better, so that the whole logic of a unit, server-side and client-side, is contained within the unit itself. Nearly all ajax unit tests take advantage of the new 'framework'. Lots of files got deleted because they became redundant or weren't used anymore."

2012-12-05 14:54:14 +01:00