bahmutov / bahmutov/inline-out
Add script injection test
Open
- Dominant language
- JavaScript
- Stars
- 3
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
test if CSP prevents script injection attack
- Add new script into the document https://github.com/bahmutov/code-snippets/blob/master/test-script-injection.js
- make sure it does not run or the error is caught by Cypress
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the Cypress test setup and use the referenced test-script-injection.js as the injected script. Run the relevant Cypress tests and verify that CSP prevents the script from running or that the resulting error is caught.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cypress, javascript
- Domain
- security, testing
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100