fix: sanitize URLs used for OAuth auth flow (via #5190)

* fix: sanitize URLs used for OAuth auth flow * embetter test case * fix linter issue
2019-02-23 14:14:30 -08:00
parent d9f460f4a8
commit 1e184e8e21
3 changed files with 32 additions and 3 deletions
--- a/test/e2e-cypress/static/documents/xss/oauth2.yaml
+++ b/test/e2e-cypress/static/documents/xss/oauth2.yaml
@@ -0,0 +1,5 @@
+swagger: '2.0'
+securityDefinitions:
+  a:
+    type: oauth2
+    authorizationUrl: javascript:alert(document.domain)//