extern/django-helpdesk
1
0
Fork 1
mirror of https://github.com/django-helpdesk/django-helpdesk.git synced 2025-06-25 20:11:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add tests for imp[roved markdown link cleaning

Browse Source
This commit is contained in:
Christopher Broderick 2025-05-16 20:10:50 +01:00
parent 326cf226dd
commit 8c11758496
1 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
helpdesk/tests/test_markdown.py
View File

@ -31,14 +31,32 @@ class MarkDown(SimpleTestCase):
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)
def test_markdown_link_correct_protokol(self):
def test_markdown_link_correct_protocol(self):
expected_value = '<p><a href="http://www.yahoo.ru">www.google.com</a></p>'
input_value = "[www.google.com](http://www.yahoo.ru)"
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)
def test_markdown_link_not_correct_protokol(self):
def test_markdown_link_not_correct_protocol(self):
expected_value = '<p><a href="//www.yahoo.ru">www.google.com</a></p>'
input_value = "[www.google.com](aaaa://www.yahoo.ru)"
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)
def test_multiline_markdown_link_with_correct_and_incorrect_protocol(self):
expected_value = '<p>This<a href="http://alert.javascript.test">XSS</a></p>\n<p>Line 2: <a href="alert(document.domain);">TEST</a></p>'
input_value = "This[XSS](http://alert.javascript.test)\n\nLine 2: [TEST](javascript:alert(document.domain);)"
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)
def test_multiline_markdown_link_with_correct_and_incorrect_protocol_twice_declared(self):
expected_value = '<p>This<a href="http://alert.javascript.test">XSS</a></p>\n<p>FAKE IT TILL YOU MAKE IT: <a href="alert(document.domain);">TEST</a></p>'
input_value = "This[XSS](http://alert.javascript.test)\n\nFAKE IT TILL YOU MAKE IT: [TEST](javascript:javascript:alert(document.domain);)"
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)
def test_markdown_link_with__multiple_incorrect_protocols(self):
expected_value = '<p>First one:<a href="alert(document.domain);">XSS1</a> ...try again: <a href="alert(document.domain);">XSS2</a></p>'
input_value = "First one:[XSS1](javascript:alert(document.domain);) ...try again: [XSS2](javascript:javascript:alert(document.domain);)"
output_value = get_markdown(input_value)
self.assertEqual(output_value, expected_value)