noVNC/tests
Solly Ross 6048299a13 Use textContent instead of innerHTML
Previously, setting `innerHTML` was used to display the statuses.  These
could include content communicated from the remote VNC server, allowing
the remove VNC server to inject HTML into the noVNC page.

This commit switches all uses of `innerHTML` to use `textContent`, which
is not vulnerable to the HTML injection.
2017-01-12 14:47:36 -05:00
..
assertions.js Don't violate Display abstraction 2016-12-09 09:20:50 +01:00
fake.websocket.js Use Typed Arrays for the send queue 2015-08-06 14:47:03 -04:00
input.html Use textContent instead of innerHTML 2017-01-12 14:47:36 -05:00
playback.js Flush out rendering after each performance test 2016-12-09 09:20:39 +01:00
run_from_console.casper.js Switch to PhantomJS 2.x for testing 2016-09-16 15:49:52 -04:00
run_from_console.js Remove duplicate line 2016-11-28 16:11:03 +01:00
run_from_console.zombie.js Support Skipped Tests and Fix JSHint Issues 2013-12-17 17:56:18 -05:00
test.base64.js Cleanup and Test: base64.js 2014-09-15 16:46:02 -04:00
test.display.js Clean up viewport handling 2016-12-09 09:20:50 +01:00
test.helper.js Comment out skipped test 2016-11-10 14:28:40 +01:00
test.keyboard.js Move input-related files into core/input 2016-09-16 15:49:52 -04:00
test.rfb.js Merge pull request #699 from CendioOssman/double 2016-12-13 12:42:22 +01:00
test.util.js Skip language tests on broken browsers 2016-11-29 17:00:24 +01:00
test.websock.js Fix failing test 2016-04-30 02:28:45 +02:00
vnc_perf.html Use textContent instead of innerHTML 2017-01-12 14:47:36 -05:00
vnc_playback.html Use textContent instead of innerHTML 2017-01-12 14:47:36 -05:00