20 lines
493 B
Ruby
20 lines
493 B
Ruby
|
require 'test_helper'
|
||
|
|
|
||
|
|
class OutputEscapingTest < ActiveSupport::TestCase
|
||
|
|
|
||
|
|
test "escape_html shouldn't die when passed nil" do
|
||
|
|
assert ERB::Util.h(nil).blank?
|
||
|
|
end
|
||
|
|
|
||
|
|
test "escapeHTML should escape strings" do
|
||
|
|
assert_equal "<>"", ERB::Util.h("<>\"")
|
||
|
|
end
|
||
|
|
|
||
|
|
test "escapeHTML shouldn't touch explicitly safe strings" do
|
||
|
|
# TODO this seems easier to compose and reason about, but
|
||
|
|
# this should be verified
|
||
|
|
assert_equal "<", ERB::Util.h("<".html_safe)
|
||
|
|
end
|
||
|
|
|
||
|
|
end
|