zopefoundation / Zope
81%
master: 82%

LAST BUILD BRANCH: fix_form_part_limit
DEFAULT BRANCH: master
Repo Added
Files 357
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH maurits-harden-zmi-frame-4x
branch: maurits-harden-zmi-frame-4x
CHANGE BRANCH
x

coverage: 81.148% (+0.03%) from 81.123%
6241206190

Pull #1160

github

mauritsvanrees 
Tighten down the ZMI frame source logic to only allow site-local sources.

Do the logic in new method `getZMIMainFrameTarget`.
Do not accept a 'tainted' came_from parameter.
Do not accept a came_from path-only url starting with '//' either.
Browsers can interpret the rest of the path as a domain.
Pull Request #1160: Tighten down ZMI frame source logic to only allow site-local sources [4.x]

4341 of 7076 branches covered (0.0%)

Branch coverage included in aggregate %.

49 of 49 new or added lines in 2 files covered. (100.0%)

27211 of 31806 relevant lines covered (85.55%)

0.86 hits per line

Relevant lines Covered
31806 RELEVANT LINES 27211 COVERED LINES
0.86 HITS PER LINE
Source Files on maurits-harden-zmi-frame-4x

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
6241206190 maurits-harden-zmi-frame-4x Tighten down the ZMI frame source logic to only allow site-local sources. Do the logic in new method `getZMIMainFrameTarget`. Do not accept a 'tainted' came_from parameter. Do not accept a came_from path-only url starting with '//' either. Browse... Pull #1160 mauritsvanrees github
81.15
See All Builds (4058)