team-alpha/railsgoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added codefix example for CSS context XSS.

Browse Source
This commit is contained in:
John Poulin
2014-04-08 14:33:38 -04:00
committed by cktricky
parent e760fc0087
commit 5056f77395
3 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/views/layouts/application.html.erb
+1 -1
View File
@@ -9,7 +9,7 @@
<%
if cookies[:font]
%>
<style>body { font-size:<%= cookies[:font] %>pt !important;}</style>
<style>body { font-size:<%= cookies[:font] %> !important;}</style>
<%
end
%>
app/views/layouts/shared/_header.html.erb
+2 -2
View File
@@ -2,8 +2,8 @@
<span style="color:#eee;margin-left:10px;">
Font Size:
<a href="<%= home_dashboard_index_path %>?font=10" style="font-size:10pt;color:#eee;">A</a>
<a href="<%= home_dashboard_index_path %>?font=18" style="font-size:18pt;color:#eee;">A</a>
<a href="<%= home_dashboard_index_path %>?font=8pt" style="font-size:10pt;color:#eee;">A</a>
<a href="<%= home_dashboard_index_path %>?font=200%25" style="font-size:18pt;color:#eee;">A</a>
</span>
<div class="user-profile">
<a data-toggle="dropdown" class="dropdown-toggle">