MC-13641: Saving configurable product with custom product attribute (…

…images as swatches)
nrkapoor · Sep 17, 2019 · fe069b2 · fe069b2
1 parent e53c11f
commit fe069b2
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 76 deletions.
diff --git a/app/code/Magento/Catalog/Test/Mftf/Data/ProductData.xml b/app/code/Magento/Catalog/Test/Mftf/Data/ProductData.xml
@@ -517,11 +517,6 @@
         <requiredEntity type="product_option">ProductOptionArea</requiredEntity>
         <requiredEntity type="product_option">ProductOptionFile</requiredEntity>
     </entity>
-    <entity name="ProductFileOptionWithScriptTag" type="product">
-        <var key="sku" entityType="product" entityKey="sku"/>
-        <data key="file">&lt;img src=x onerror='alert("XSS without &lt;script&gt;&lt;:script&gt; tags...")'&gt;.png</data>
-        <requiredEntity type="product_option">ProductOptionFile</requiredEntity>
-    </entity>
     <entity name="ApiVirtualProductWithDescription" type="product">
         <data key="sku" unique="suffix">api-virtual-product</data>
         <data key="type_id">virtual</data>

diff --git a/...est/Mftf/Test/StorefrontVerifyCannotLoadFileWithIncorrectNameThroughCustomOptionsTest.xml b/...est/Mftf/Test/StorefrontVerifyCannotLoadFileWithIncorrectNameThroughCustomOptionsTest.xml
diff --git a/.../_data/<img src=x onerror='alert("XSS without <script><:script> tags...")'>.png b/.../_data/<img src=x onerror='alert("XSS without <script><:script> tags...")'>.png