diff --git a/test/unit/chunks/category_test.rb b/test/unit/chunks/category_test.rb
index 6bc7627f..86c1ca51 100755
--- a/test/unit/chunks/category_test.rb
+++ b/test/unit/chunks/category_test.rb
@@ -19,4 +19,11 @@ class CategoryTest < Test::Unit::TestCase
)
end
+ def test_multiple_categories_sanitized
+ match(Category, 'category: test, multiple,a & b ', :list => ['test', 'multiple', '<span>a & b</span> <script>alert("XSS!");</script>'], :hidden => nil)
+ match(Category, 'category : chunk test , multi category,a & b ',
+ :list => ['chunk test','multi category','<span>a & b</span> <script>alert("XSS!");</script>'], :hidden => nil
+ )
+ end
+
end
diff --git a/test/unit/chunks/nowiki_test.rb b/test/unit/chunks/nowiki_test.rb
index 8af5a645..c1010922 100755
--- a/test/unit/chunks/nowiki_test.rb
+++ b/test/unit/chunks/nowiki_test.rb
@@ -12,4 +12,10 @@ class NoWikiTest < Test::Unit::TestCase
)
end
+ def test_sanitized_nowiki
+ match(NoWiki, 'This sentence contains a & b . Do not touch!',
+ :plain_text => 'a & b <script>alert("XSS!");</script>'
+ )
+ end
+
end