7be72850d3PR-URL: https://github.com/nodejs/node/pull/36811 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
34 lines
1 KiB
JavaScript
34 lines
1 KiB
JavaScript
async_test(t => {
|
|
// This could be detected as ISO-2022-JP, in which case there would be no
|
|
// <textarea>, and thus the script inside would be interpreted as actual
|
|
// script.
|
|
const blob = new Blob(
|
|
[
|
|
`aaa\u001B$@<textarea>\u001B(B<script>/* xss */<\/script></textarea>bbb`
|
|
],
|
|
{type: 'text/html;charset=utf-8'});
|
|
const url = URL.createObjectURL(blob);
|
|
const win = window.open(url);
|
|
t.add_cleanup(() => {
|
|
win.close();
|
|
});
|
|
|
|
win.onload = t.step_func_done(() => {
|
|
assert_equals(win.document.charset, 'UTF-8');
|
|
});
|
|
}, 'Blob charset should override any auto-detected charset.');
|
|
|
|
async_test(t => {
|
|
const blob = new Blob(
|
|
[`<!doctype html>\n<meta charset="ISO-8859-1">`],
|
|
{type: 'text/html;charset=utf-8'});
|
|
const url = URL.createObjectURL(blob);
|
|
const win = window.open(url);
|
|
t.add_cleanup(() => {
|
|
win.close();
|
|
});
|
|
|
|
win.onload = t.step_func_done(() => {
|
|
assert_equals(win.document.charset, 'UTF-8');
|
|
});
|
|
}, 'Blob charset should override <meta charset>.');
|