commit 63c8c5b1c1e474a8c8b22f266ab4a7105d326614
author Alex Harui <aharui@adobe.com> Sat Mar 02 19:44:11 2024 -0800
committer Alex Harui <aharui@adobe.com> Sat Mar 02 19:44:11 2024 -0800
tree f22b09169d6c863eb21ca8348c3407e391da3448
parent 7b7d6c14e00122008d2e937640e37e7e11aeeb85

copy XSS prevention from content/asdoc/index.html

content/flexunit/asdoc/aircilistener/index.html

diff --git a/content/flexunit/asdoc/aircilistener/index.html b/content/flexunit/asdoc/aircilistener/index.html
index 39eb4e3..a57e803 100644
--- a/content/flexunit/asdoc/aircilistener/index.html
+++ b/content/flexunit/asdoc/aircilistener/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;

content/flexunit/asdoc/cilistener/index.html

diff --git a/content/flexunit/asdoc/cilistener/index.html b/content/flexunit/asdoc/cilistener/index.html
index 8d46cb8..6e1e53d 100644
--- a/content/flexunit/asdoc/cilistener/index.html
+++ b/content/flexunit/asdoc/cilistener/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;

content/flexunit/asdoc/flexUnit4FluintExtensions/index.html

diff --git a/content/flexunit/asdoc/flexUnit4FluintExtensions/index.html b/content/flexunit/asdoc/flexUnit4FluintExtensions/index.html
index 8d46cb8..6e1e53d 100644
--- a/content/flexunit/asdoc/flexUnit4FluintExtensions/index.html
+++ b/content/flexunit/asdoc/flexUnit4FluintExtensions/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;

content/flexunit/asdoc/flexcoverlistener/index.html

diff --git a/content/flexunit/asdoc/flexcoverlistener/index.html b/content/flexunit/asdoc/flexcoverlistener/index.html
index 8d46cb8..6e1e53d 100644
--- a/content/flexunit/asdoc/flexcoverlistener/index.html
+++ b/content/flexunit/asdoc/flexcoverlistener/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;

content/flexunit/asdoc/flexunit/index.html

diff --git a/content/flexunit/asdoc/flexunit/index.html b/content/flexunit/asdoc/flexunit/index.html
index 8d46cb8..6e1e53d 100644
--- a/content/flexunit/asdoc/flexunit/index.html
+++ b/content/flexunit/asdoc/flexunit/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;

content/flexunit/asdoc/uilistener/index.html

diff --git a/content/flexunit/asdoc/uilistener/index.html b/content/flexunit/asdoc/uilistener/index.html
index 39eb4e3..a57e803 100644
--- a/content/flexunit/asdoc/uilistener/index.html
+++ b/content/flexunit/asdoc/uilistener/index.html
@@ -4,6 +4,17 @@
     <script language="javascript" type="text/javascript">
     	<!--
         window.onload=function(){
+            "use strict";
+            var d2=decodeURIComponent(document.location.search).toLowerCase();
+            if(
+                    d2.indexOf('javascript:') > -1 ||
+                    d2.indexOf('//') > -1 ||
+                    d2.indexOf('..') > -1 ||
+                    d2.indexOf(':') > -1
+            ){
+                    return;
+            }
+
             var d=document.location.search;
 			var args=d.substring(d.lastIndexOf('?')+1,d.length);
 			var classFrameContent=args;