Anon/pleroma
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

test: update test for new html scrub policy

Browse Source
This commit is contained in:
William Pitcock 2018-10-05 21:11:22 +00:00
parent bd76d9cee6
commit 497814cbbb
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
test/web/common_api/common_api_test.exs
View File

@ -26,7 +26,7 @@ defmodule Pleroma.Web.CommonAPI.Test do
test "it filters out obviously bad tags when accepting a post as HTML" do test "it filters out obviously bad tags when accepting a post as HTML" do
user = insert(:user) user = insert(:user)
post = "<h1>2hu</h1><script>alert('xss')</script>" post = "<p><b>2hu</b></p><script>alert('xss')</script>"
{:ok, activity} = {:ok, activity} =
CommonAPI.post(user, %{ CommonAPI.post(user, %{
@ -35,13 +35,13 @@ defmodule Pleroma.Web.CommonAPI.Test do
}) })
content = activity.data["object"]["content"] content = activity.data["object"]["content"]
assert content == "<h1>2hu</h1>alert('xss')" assert content == "<p><b>2hu</b></p>alert('xss')"
end end
test "it filters out obviously bad tags when accepting a post as Markdown" do test "it filters out obviously bad tags when accepting a post as Markdown" do
user = insert(:user) user = insert(:user)
post = "<h1>2hu</h1><script>alert('xss')</script>" post = "<p><b>2hu</b></p><script>alert('xss')</script>"
{:ok, activity} = {:ok, activity} =
CommonAPI.post(user, %{ CommonAPI.post(user, %{
@ -50,7 +50,7 @@ defmodule Pleroma.Web.CommonAPI.Test do
}) })
content = activity.data["object"]["content"] content = activity.data["object"]["content"]
assert content == "<h1>2hu</h1>alert('xss')" assert content == "<p><b>2hu</b></p>alert('xss')"
end end
end end
end end