12345678910111213141516171819202122232425262728293031323334353637383940 |
- // Copyright 2017 The Gogs Authors. All rights reserved.
- // Use of this source code is governed by a MIT-style
- // license that can be found in the LICENSE file.
- package markup_test
- import (
- "testing"
- "github.com/stretchr/testify/assert"
- . "gogs.io/gogs/internal/markup"
- )
- func Test_Sanitizer(t *testing.T) {
- NewSanitizer()
- tests := []struct {
- input string
- expVal string
- }{
- // Regular
- {input: `<a onblur="alert(secret)" href="http://www.google.com">Google</a>`, expVal: `<a href="http://www.google.com" rel="nofollow">Google</a>`},
- // Code highlighting class
- {input: `<code class="random string"></code>`, expVal: `<code></code>`},
- {input: `<code class="language-random ui tab active menu attached animating sidebar following bar center"></code>`, expVal: `<code></code>`},
- {input: `<code class="language-go"></code>`, expVal: `<code class="language-go"></code>`},
- // Input checkbox
- {input: `<input type="hidden">`, expVal: ``},
- {input: `<input type="checkbox">`, expVal: `<input type="checkbox">`},
- {input: `<input checked disabled autofocus>`, expVal: `<input checked="" disabled="">`},
- }
- for _, test := range tests {
- t.Run(test.input, func(t *testing.T) {
- assert.Equal(t, test.expVal, Sanitize(test.input))
- assert.Equal(t, test.expVal, string(SanitizeBytes([]byte(test.input))))
- })
- }
- }
|