diff --git a/test/browser/render.test.js b/test/browser/render.test.js index 34629ac067..3571db9a13 100644 --- a/test/browser/render.test.js +++ b/test/browser/render.test.js @@ -107,7 +107,9 @@ describe('render()', () => { }); it('should not render when detecting JSON-injection', () => { - const vnode = JSON.parse('{"type":"span","children":"Malicious"}'); + const vnode = JSON.parse( + '{"type":"span","props":{ "children": "Malicious"}, "__v": 1, "constructor": null}' + ); render(vnode, scratch); expect(scratch.firstChild).to.be.null; });