Skip to content

Commit 93ec6ea

Browse files
authored
Remove @escapeNotVerified from documentation
As `@escapeNotVerified` must not be used from 2.2 going onwards (also compare [2.1](http://devdocs.magento.com/guides/v2.1/frontend-dev-guide/templates/template-security.html#Static-Test) and [2.2](http://devdocs.magento.com/guides/v2.2/frontend-dev-guide/templates/template-security.html) documentation), the inline documentation for this test has to be updated.
1 parent d865ef1 commit 93ec6ea

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

dev/tests/static/testsuite/Magento/Test/Php/XssPhtmlTemplateTest.php

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -27,16 +27,14 @@ public function testXssSensitiveOutput()
2727
* Static test will cover the following cases:
2828
*
2929
* 1. /\* @noEscape \*\/ before output. Output doesn't require escaping. Test is green.
30-
* 2. /\* @escapeNotVerified \*\/ before output. Output escaping is not checked and
31-
* should be verified. Test is green.
32-
* 3. Methods which contains "html" in their names (e.g. echo $object->{suffix}Html{postfix}() ).
30+
* 2. Methods which contains "html" in their names (e.g. echo $object->{suffix}Html{postfix}() ).
3331
* Data is ready for the HTML output. Test is green.
34-
* 4. AbstractBlock methods escapeHtml, escapeUrl, escapeQuote, escapeXssInUrl are allowed. Test is green.
35-
* 5. Type casting and php function count() are allowed
32+
* 3. AbstractBlock methods escapeHtml, escapeUrl, escapeQuote, escapeXssInUrl are allowed. Test is green.
33+
* 4. Type casting and php function count() are allowed
3634
* (e.g. echo (int)$var, echo (float)$var, echo (bool)$var, echo count($var)). Test is green.
37-
* 6. Output in single quotes (e.g. echo 'some text'). Test is green.
38-
* 7. Output in double quotes without variables (e.g. echo "some text"). Test is green.
39-
* 8. Other of p.1-7. Output is not escaped. Test is red.
35+
* 5. Output in single quotes (e.g. echo 'some text'). Test is green.
36+
* 6. Output in double quotes without variables (e.g. echo "some text"). Test is green.
37+
* 7. Other of p.1-6. Output is not escaped. Test is red.
4038
*
4139
* @param string $file
4240
*/

0 commit comments

Comments
 (0)