other_markup_spec.rb 542 Bytes
Newer Older
1 2 3
require 'spec_helper'

describe Gitlab::OtherMarkup, lib: true do
4 5
  let(:context) { {} }

6 7 8 9 10
  context "XSS Checks" do
    links = {
      'links' => {
        file: 'file.rdoc',
        input: 'XSS[JaVaScriPt:alert(1)]',
11
        output: "\n" + '<p><a>XSS</a></p>' + "\n"
12 13 14 15 16 17 18 19 20 21 22 23 24
      }
    }
    links.each do |name, data|
      it "does not convert dangerous #{name} into HTML" do
        expect(render(data[:file], data[:input], context)).to eql data[:output]
      end
    end
  end

  def render(*args)
    described_class.render(*args)
  end
end