tbranyen / diffhtml
94%
master: 99%

Repo Added 08 Jan 2016 01:30AM UTC

Files 45

Badge

Embed ▾

LAST BUILD ON BRANCH escape-tagged-input
branch: escape-tagged-input

CHANGE BRANCH
x

Reset

escape-tagged-input

0.4.2

0.4.3

0.4.4

0.5.1

0.8.5

0.9.0

0.9.1

0.9.2

add-logo

add-middleware

add-middleware-create-hooks

add-more-tests

add-service-worker-middleware

add-stateful-components

add-test-for-comment

add-worker-middleware

another-cleanup-pass

another-refactor-pass

apply-miscellaneous-changes

better-render-to-string

browser-compatibility-fixes

bug/parser-child-text-nodes

bugfix/extra-patches

bugfix/fix-internals-exports

bump-lerna

components-love

config-unit-tests

create-side-effect

dependabot/npm_and_yarn/axios-1.11.0

dependabot/npm_and_yarn/packages/diffhtml-devtools/cipher-base-1.0.6

dependabot/npm_and_yarn/packages/diffhtml-devtools/grunt-1.5.2

dependabot/npm_and_yarn/packages/diffhtml-devtools/grunt-1.5.3

dependabot/npm_and_yarn/packages/diffhtml-devtools/multi-261c07481c

dependabot/npm_and_yarn/packages/diffhtml-rust-parser/examples/webpack/node-forge-1.3.2

dependabot/npm_and_yarn/packages/diffhtml-static-sync/cipher-base-1.0.7

dependabot/npm_and_yarn/packages/diffhtml-static-sync/sha.js-2.4.12

dependabot/npm_and_yarn/parse-url-6.0.2

devtools-revival

diffhtml-pkg-updates

documentation-updates

ensure-all-tests-run-in-ci

feature/add-as-contributor

feature/add-tasks-list

feature/pkg.module

fix-angle-brackets-in-attrs

fix-attribute-handling

fix-bool-attr-parsing

fix-code-block-el

fix-decoding-issue

fix-devtools-build

fix-duplicate-keys

fix-execute-scripts

fix-fragment-sync

fix-hooks

fix-inline-transitions

fix-interpolated-values

fix-issues-with-external-markup-changes

fix-parser-components

fix-pre-code-blocks

fix-process-env

fix-react-compat

fix-render

fix-rerender-components

fix-svg-rendering

fix-tests-and-devtools

fix-timing-marks

general-cleanup

get-build-passing-again

gitignore-docs

improve-components-implementation

improve-diffhtml-attributes

improve-docs

improve-garbage-collection-and-devtools

improve-static-sync

inconsistent-dom

linter

master

migrate-prollyfill

misc-work

more-examples

npm-install

pass-children-to-web-component-ctor

react-compat

readme-changes

readme-updates

refactor-internals

refactor-transaction-add-polyfill

refs/tags/v1.0.0-beta.28

refs/tags/v1.0.0-beta.29

remove-blacklist-whitelist

remove-custom-event

remove-svg-elements

remove-transitions

rename-internal-process

rename-runtime-to-lite

rework-babel-transform

rewrite-sync-patch

rust-wasm-parser

scrub-attrs-nodes-on-release

support-node-esm

tbranyen-patch-1

test-input-checked

test-readme

test-self-hosted

transaction-flow

transform

update

update-all-packages

update-components-deps

use-github-action

use-github-pages

use-patch-logic-for-component-render

use-raw-node-name

use-sets-instead-of-arrays

v1.0.0-beta

v1.0.0-beta.1

v1.0.0-beta.11

v1.0.0-beta.12

v1.0.0-beta.13

v1.0.0-beta.14

v1.0.0-beta.15

v1.0.0-beta.16

v1.0.0-beta.17

v1.0.0-beta.18

v1.0.0-beta.19

v1.0.0-beta.2

v1.0.0-beta.20

v1.0.0-beta.21

v1.0.0-beta.22

v1.0.0-beta.23

v1.0.0-beta.24

v1.0.0-beta.25

v1.0.0-beta.26

v1.0.0-beta.3

v1.0.0-beta.4

v1.0.0-beta.5

v1.0.0-beta.6

v1.0.0-beta.7

v1.0.0-beta.8

v1.0.0-beta.9

various-changes

various-updates

vundefined

warn-on-invalid-markup

worker-improvements

pending completion

Build # 319

Build Type

push

travis-ci

Committed by

tbranyen

Commit Message

Fixes bugs with tagged template helper and escape

The tagged template helper will now escape any interpolated text values.
This is a safer approach to directly injecting markup. If you wish to
embed raw markup you can use the `html` method directly like so:

    function render() {
      let escaped = '<script>window.alert('xss')</script>';
      let unescaped = '<center>of attention</center>';

      outerHTML(document.body, html`<body>
        <p>Escaped: ${escaped}</p>
        <p>Unescaped: ${html(unescaped)}</p>
      </body>`);
    }

    render();

This patch also addresses two bugs with the parser. Text preceding the
first defined element would be discarded. Another bug was with two
dynamic interpolated values being right next to eachother not
transforming properly.

Run Details

760 of 812 relevant lines covered (93.6%)

1290.91 hits per line

Relevant lines Covered

812 RELEVANT LINES 760 COVERED LINES

1290.91 HITS PER LINE

Source Files on escape-tagged-input

Coverage	∆	File	Lines	Relevant	Covered	Missed	Hits/Line

Recent builds

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
319	escape-tagged-input	Fixes bugs with tagged template helper and escape The tagged template helper will now escape any interpolated text values. This is a safer approach to directly injecting markup. If you wish to embed raw markup you can use the `html` method direct...	push	09 Jun 2016 09:48PM UTC	tbranyen	travis-ci	pending completion
318	escape-tagged-input	Fixes bugs with tagged template helper and escape The tagged template helper will now escape any interpolated text values. This is a safer approach to directly injecting markup. If you wish to embed raw markup you can use the `html` method direct...	push	09 Jun 2016 09:47PM UTC	tbranyen	travis-ci	pending completion
315	escape-tagged-input	Fixes bugs with tagged template helper and escape The tagged template helper will now escape any interpolated text values. This is a safer approach to directly injecting markup. If you wish to embed raw markup you can use the `html` method direct...	push	09 Jun 2016 09:38PM UTC	tbranyen	travis-ci	pending completion

See All Builds (1080)

tbranyen / diffhtml
94%
master: 99%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH
x

Relevant lines Covered

Source Files on escape-tagged-input

Recent builds

tbranyen / diffhtml 94% master: 99%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH x

Relevant lines Covered

Source Files on escape-tagged-input

Recent builds

tbranyen / diffhtml
94%
master: 99%

README BADGES
x

CHANGE BRANCH
x