Skip to content

Instantly share code, notes, and snippets.

@barnabywalters

barnabywalters/input.html

Last active December 17, 2015 21:18
Show Gist options
  • Save barnabywalters/5673385 to your computer and use it in GitHub Desktop.
Save barnabywalters/5673385 to your computer and use it in GitHub Desktop.
Download ZIP
Test case for microformats-2 e-* p-* HTML injection potential security hole
Raw
input.html
<span class="h-thing">
<span class="e-content">&lt; Things &gt; &amp;</span>
</span>
<span class="h-thing">
<span class="p-content">&lt; Things &gt; &amp;</span>
</span>
Raw
output.json
{
"items": [
{
"type": [
"h-thing"
],
"properties": {
"content": [
"&lt; Things &gt; &amp;"
],
"name": [
"< Things > &"
]
}
},
{
"type": [
"h-thing"
],
"properties": {
"content": [
"< Things > &"
],
"name": [
"< Things > &"
]
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment