mozilla / blurts-server / #12870

23%

main: 19%

push

circleci

Don't pass unsanitised user input into HTML

It should now no longer be possible to pass arbitrary HTML (e.g.
including malicious JS) into the query parameters and have that
show up on the unsubscribe page. Additionally, the query parameters
get validated, and only the relevant parameters are sent to the
back-end.

282 of 1473 branches covered (19.14%)

Branch coverage included in aggregate %.

12 of 12 new or added lines in 1 file covered. (100.0%)

959 of 4003 relevant lines covered (23.96%)

1.99 hits per line