修改功能
This commit is contained in:
@@ -103,7 +103,6 @@ test('亲友记录响应使用 PC RelativeRecordVo 并保留 BigDecimal 字符
|
||||
eventTime: '2026-07-24 09:30:00',
|
||||
giftAmount: '500.50',
|
||||
recordContent: '出席',
|
||||
mediaOssIds: '2060000000000000004',
|
||||
sortOrder: 1,
|
||||
status: '0',
|
||||
remark: '往来记录'
|
||||
@@ -122,7 +121,6 @@ test('亲友记录响应使用 PC RelativeRecordVo 并保留 BigDecimal 字符
|
||||
eventTime: '2026-07-24 09:30:00',
|
||||
giftAmount: '500.50',
|
||||
recordContent: '出席',
|
||||
mediaOssIds: '2060000000000000004',
|
||||
sortOrder: 1,
|
||||
status: '0',
|
||||
remark: '往来记录'
|
||||
@@ -148,7 +146,6 @@ test('亲友记录渲染业务字段但不暴露手机号、OSS ID 或未转义
|
||||
eventTime: '2026-07-24 09:30:00',
|
||||
giftAmount: '500.50',
|
||||
recordContent: '<img src=x onerror=alert(1)>出席',
|
||||
mediaOssIds: '4,5',
|
||||
sortOrder: 1,
|
||||
status: '0'
|
||||
});
|
||||
@@ -157,7 +154,7 @@ test('亲友记录渲染业务字段但不暴露手机号、OSS ID 或未转义
|
||||
assert.doesNotMatch(html, /<script>|<img/);
|
||||
assert.match(html, /出席/);
|
||||
assert.match(html, /500\.50/);
|
||||
assert.match(html, /2 个附件/);
|
||||
assert.match(html, /未上传/);
|
||||
assert.doesNotMatch(html, /19100000000|>4<|>5</);
|
||||
});
|
||||
|
||||
|
||||
Reference in New Issue
Block a user