diff --git a/test/unit/chunks/category_test.rb b/test/unit/chunks/category_test.rb index 6bc7627f..86c1ca51 100755 --- a/test/unit/chunks/category_test.rb +++ b/test/unit/chunks/category_test.rb @@ -19,4 +19,11 @@ class CategoryTest < Test::Unit::TestCase ) end + def test_multiple_categories_sanitized + match(Category, 'category: test, multiple,a & b ', :list => ['test', 'multiple', '<span>a & b</span> <script>alert("XSS!");</script>'], :hidden => nil) + match(Category, 'category : chunk test , multi category,a & b ', + :list => ['chunk test','multi category','<span>a & b</span> <script>alert("XSS!");</script>'], :hidden => nil + ) + end + end diff --git a/test/unit/chunks/nowiki_test.rb b/test/unit/chunks/nowiki_test.rb index 8af5a645..c1010922 100755 --- a/test/unit/chunks/nowiki_test.rb +++ b/test/unit/chunks/nowiki_test.rb @@ -12,4 +12,10 @@ class NoWikiTest < Test::Unit::TestCase ) end + def test_sanitized_nowiki + match(NoWiki, 'This sentence contains a & b . Do not touch!', + :plain_text => 'a & b <script>alert("XSS!");</script>' + ) + end + end