require 'spec_helper' describe Gitlab::OtherMarkup, lib: true do
let(:context) { {} }
context "XSS Checks" do links = { 'links' => { file: 'file.rdoc', input: 'XSS[JaVaScriPt:alert(1)]',
output: "\n" + '<p><a>XSS</a></p>' + "\n"
} } links.each do |name, data| it "does not convert dangerous #{name} into HTML" do expect(render(data[:file], data[:input], context)).to eql data[:output] end end end def render(*args) described_class.render(*args) end end