{ "name": "verify-form-render-escaping", "nodes": [ {"id": "n1", "name": "Form", "type": "form-trigger", "position": {"x": 0, "y": 0}, "config": {"title": "", "description": "a \"quoted\" & bold description", "path": "/x\">", "fields": [ {"name": "q", "label": "", "type": "text"}, {"name": "ph", "label": "Placeholder field", "type": "text", "placeholder": "\">"}, {"name": "sel", "label": "Select field", "type": "select", "options": ["\">"]}, {"name": "file1", "label": "File field", "type": "file", "accept": "\">"} ]}} ], "connections": [], "http": { "method": "GET", "path": "/webhook/{workflowId}/x%22%3E%3Cscript%3Ex4%3C/script%3E", "expectStatus": 200, "expectBodyContains": [ "<script>alert(1)</script>", "<img src=x onerror=alert(2)>", "&", ""><script>x1</script>", ""><script>x2</script>", ""><script>x3</script>", "/x"><script>x4</script>" ], "expectBodyExcludes": [ "", "", "\">", "\">", "\">" ] } }