{
"name": "verify-form-render-escaping",
"nodes": [
{"id": "n1", "name": "Form", "type": "form-trigger", "position": {"x": 0, "y": 0},
"config": {"title": "",
"description": "a \"quoted\" & bold description",
"path": "/x\">",
"fields": [
{"name": "q", "label": "
", "type": "text"},
{"name": "ph", "label": "Placeholder field", "type": "text",
"placeholder": "\">"},
{"name": "sel", "label": "Select field", "type": "select",
"options": ["\">"]},
{"name": "file1", "label": "File field", "type": "file",
"accept": "\">"}
]}}
],
"connections": [],
"http": {
"method": "GET",
"path": "/webhook/{workflowId}/x%22%3E%3Cscript%3Ex4%3C/script%3E",
"expectStatus": 200,
"expectBodyContains": [
"<script>alert(1)</script>",
"<img src=x onerror=alert(2)>",
"&",
""><script>x1</script>",
""><script>x2</script>",
""><script>x3</script>",
"/x"><script>x4</script>"
],
"expectBodyExcludes": [
"",
"
",
"\">",
"\">",
"\">"
]
}
}