You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by kw...@apache.org on 2022/08/13 14:39:59 UTC
[sling-org-apache-sling-scripting-sightly-testing-content] 01/01: SLING-11538 add test content for display context "jsonString"
This is an automated email from the ASF dual-hosted git repository.
kwin pushed a commit to branch feature/SLING-11538-xss-jsonString
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-scripting-sightly-testing-content.git
commit d00e401c85d4541b36c2f0b7b9ade7f034dac534
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Sat Aug 13 16:39:54 2022 +0200
SLING-11538 add test content for display context "jsonString"
---
.../SLING-INF/apps/sightly/scripts/xss/xss.html | 21 +++++++++++++++++++++
src/main/resources/SLING-INF/content/sightly.json | 4 ++++
2 files changed, 25 insertions(+)
diff --git a/src/main/resources/SLING-INF/apps/sightly/scripts/xss/xss.html b/src/main/resources/SLING-INF/apps/sightly/scripts/xss/xss.html
new file mode 100644
index 0000000..7e8ece4
--- /dev/null
+++ b/src/main/resources/SLING-INF/apps/sightly/scripts/xss/xss.html
@@ -0,0 +1,21 @@
+<!--/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ ~ Licensed to the Apache Software Foundation (ASF) under one or more
+ ~ contributor license agreements. See the NOTICE file distributed with
+ ~ this work for additional information regarding copyright ownership.
+ ~ The ASF licenses this file to You under the Apache License, Version 2.0
+ ~ (the "License"); you may not use this file except in compliance with
+ ~ the License. You may obtain a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0
+ ~
+ ~ Unless required by applicable law or agreed to in writing, software
+ ~ distributed under the License is distributed on an "AS IS" BASIS,
+ ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions and
+ ~ limitations under the License.
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/-->
+<script type="application/json" id="json-string-1">
+{
+ "field":"${'" test'@ context='jsonString'}"
+}
+</script>
\ No newline at end of file
diff --git a/src/main/resources/SLING-INF/content/sightly.json b/src/main/resources/SLING-INF/content/sightly.json
index fbab8f4..5f89ad2 100644
--- a/src/main/resources/SLING-INF/content/sightly.json
+++ b/src/main/resources/SLING-INF/content/sightly.json
@@ -79,6 +79,10 @@
"inherit": {
"jcr:primaryType": "nt:unstructured",
"sling:resourceType": "sightly/scripts/inherit"
+ },
+ "xss": {
+ "jcr:primaryType": "nt:unstructured",
+ "sling:resourceType" : "/apps/sightly/scripts/xss"
}
}