Bound provisioning history and poll only active operations
This commit is contained in:
@@ -146,6 +146,8 @@ describe('provisioning response and return-context boundaries', () => {
|
||||
it('retains list filters without accepting an external or unrelated return destination', () => {
|
||||
expect(provisioningReturn('/provisioning?view=history&action=restart&server=Lobby+1&limit=50&redirect=https://evil.test').href)
|
||||
.toBe('/provisioning?view=history&action=restart&server=Lobby+1&limit=50');
|
||||
expect(provisioningReturn('/provisioning?view=history&limit=25&offset=100').href)
|
||||
.toBe('/provisioning?view=history&limit=25&offset=100');
|
||||
for (const value of ['https://evil.test', '//evil.test', '/\\evil.test', '/\n/evil.test', '/settings', '/provisioning/other']) {
|
||||
expect(provisioningReturn(value).href).toBe('/provisioning');
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user