diff options
Diffstat (limited to 'tests/test_urlmap.py')
| -rw-r--r-- | tests/test_urlmap.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/tests/test_urlmap.py b/tests/test_urlmap.py index 60b66eb..9f77ca2 100644 --- a/tests/test_urlmap.py +++ b/tests/test_urlmap.py @@ -45,3 +45,5 @@ def test_404(): app = TestApp(mapper, extra_environ={'HTTP_ACCEPT': 'text/html'}) res = app.get("/-->%0D<script>alert('xss')</script>", status=404) assert '--><script' not in res.body + res = app.get("/--%01><script>", status=404) + assert '--\x01><script>' not in res.body |