@@ -27,16 +27,14 @@ public function testXssSensitiveOutput()
2727 * Static test will cover the following cases:
2828 *
2929 * 1. /\* @noEscape \*\/ before output. Output doesn't require escaping. Test is green.
30- * 2. /\* @escapeNotVerified \*\/ before output. Output escaping is not checked and
31- * should be verified. Test is green.
32- * 3. Methods which contains "html" in their names (e.g. echo $object->{suffix}Html{postfix}() ).
30+ * 2. Methods which contains "html" in their names (e.g. echo $object->{suffix}Html{postfix}() ).
3331 * Data is ready for the HTML output. Test is green.
34- * 4 . AbstractBlock methods escapeHtml, escapeUrl, escapeQuote, escapeXssInUrl are allowed. Test is green.
35- * 5 . Type casting and php function count() are allowed
32+ * 3 . AbstractBlock methods escapeHtml, escapeUrl, escapeQuote, escapeXssInUrl are allowed. Test is green.
33+ * 4 . Type casting and php function count() are allowed
3634 * (e.g. echo (int)$var, echo (float)$var, echo (bool)$var, echo count($var)). Test is green.
37- * 6 . Output in single quotes (e.g. echo 'some text'). Test is green.
38- * 7 . Output in double quotes without variables (e.g. echo "some text"). Test is green.
39- * 8 . Other of p.1-7 . Output is not escaped. Test is red.
35+ * 5 . Output in single quotes (e.g. echo 'some text'). Test is green.
36+ * 6 . Output in double quotes without variables (e.g. echo "some text"). Test is green.
37+ * 7 . Other of p.1-6 . Output is not escaped. Test is red.
4038 *
4139 * @param string $file
4240 */
0 commit comments