deac/instiki
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

More unit tests.

Browse source
This commit is contained in:
Jacques Distler 2007-02-24 00:41:35 -06:00
parent fff30ec27f
commit 59c64439d8
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
test/unit/sanitize_test.rb
View file

@ -40,6 +40,13 @@ class SanitizeTest < Test::Unit::TestCase
end end
end end
Sanitize::ALLOWED_PROTOCOLS.each do |protocol|
define_method "test_should_allow_#{protocol}_uris" do
assert_equal "<a href=\"#{protocol}\">foo</a>",
sanitize_html(%(<a href="#{protocol}">foo</a>))
end
end
def test_should_allow_anchors def test_should_allow_anchors
assert_equal "<a href=\"foo\">&lt;script>baz&lt;/script></a>", assert_equal "<a href=\"foo\">&lt;script>baz&lt;/script></a>",
sanitize_html("<a href='foo' onclick='bar'><script>baz</script></a>") sanitize_html("<a href='foo' onclick='bar'><script>baz</script></a>")
@ -72,7 +79,7 @@ class SanitizeTest < Test::Unit::TestCase
end end
end end
[%(<img src="javascript:alert('XSS');" />), [%(<img src="javascript:alert('XSS');" />),
%(<img src=javascript:alert('XSS') />), %(<img src=javascript:alert('XSS') />),
%(<img src="JaVaScRiPt:alert('XSS')" />), %(<img src="JaVaScRiPt:alert('XSS')" />),
%(<img src='javascript:alert(&quot;XSS&quot;)' />), %(<img src='javascript:alert(&quot;XSS&quot;)' />),