escape json for use in js

2018-11-23 17:26:40 +05:00
parent 8df5b58853
commit e0d19d6871
3 changed files with 11 additions and 8 deletions
--- a/lms/djangoapps/courseware/tests/test_module_render.py
+++ b/lms/djangoapps/courseware/tests/test_module_render.py
@@ -1466,7 +1466,7 @@ class JsonInitDataTest(ModuleStoreTestCase):

    @ddt.data(
        ({'a': 17}, '''{"a": 17}'''),
-        ({'xss': '</script>alert("XSS")'}, r'''{"xss": "<\/script>alert(\"XSS\")"}'''),
+        ({'xss': '</script>alert("XSS")'}, r'''{"xss": "\u003c/script\u003ealert(\"XSS\")"}'''),
    )
    @ddt.unpack
    @XBlock.register_temp_plugin(XBlockWithJsonInitData, identifier='withjson')