XSS attribute handling mangles valid attribute names containing numbers (D7 backport)

Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.1 & MySQL 5.7
last update about 1 year ago
run-tests.sh exception
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.1 & MySQL 5.7
last update about 1 year ago
2,159 pass
Comment about 1 year ago →
🇸🇰Slovakia poker10
I am uploading a new patch - reroll & removed the plus signs not present in the D10.

Now the patch should be equal to the current D10 code: https://git.drupalcode.org/project/drupal/-/blob/11.x/core/lib/Drupal/Component/Utility/Xss.php#L216

Adding also test only patch to see that the attrbutes are malformed in the current state.
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.4 & SQLite 3.27
last update about 1 year ago
2,154 pass, 1 fail
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.4 & SQLite 3.27
last update about 1 year ago
run-tests.sh exception
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.4 & SQLite 3.27
last update about 1 year ago
2,155 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.1 & MySQL 5.7
last update about 1 year ago
2,158 pass, 1 fail
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & pgsql-13.5
last update about 1 year ago
2,119 pass, 1 fail
Comment about 1 year ago →
System Message
The last submitted patch, 4: 2847553-4_test-only.patch, failed testing. View results →
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & pgsql-13.5
last update about 1 year ago
run-tests.sh exception
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.0 & MySQL 5.7
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.4 & PostgreSQL 9.5
last update about 1 year ago
2,120 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 5.3 & MySQL 5.5
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.4 & MySQL 5.7
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 5.6 & MySQL 5.5
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update about 1 year ago
run-tests.sh exception
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.2 & MySQL 5.6
last update about 1 year ago
run-tests.sh exception
Open in Jenkins → Open on Drupal.org →
Environment: PHP 7.2 & MySQL 5.6
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & MySQL 8
last update about 1 year ago
2,159 pass
Open in Jenkins → Open on Drupal.org →
Environment: PHP 8.2 & pgsql-13.5
last update about 1 year ago
2,120 pass
Comment 8 months ago →
🇸🇰Slovakia poker10
Adding a tag for the review from another D7 maintainer before commit.

mcdruid → committed 6b7e2b1a on 7.x

Issue #2847553 by poker10, Jill L, David_Rothstein: XSS attribute...

Status changed to Fixed 7 months ago11:33am 5 December 2023
Comment 7 months ago →
🇬🇧United Kingdom mcdruid 🇬🇧🇪🇺
Thanks; great that we added a test.
Comment 6 months ago →
System Message
Automatically closed - issue fixed for 2 weeks with no activity.

XSS attribute handling mangles valid attribute names containing numbers (D7 backport)

Comments & Activities