Products.PortalTransforms/midsummersprint_fix_transforms: Add more test for nasty tags
Gil Forcada <jenkins-z4DKO/[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.cvs |
|---|---|
| Message-ID | <[email protected]> |
Repository: Products.PortalTransforms Branch: refs/heads/midsummersprint_fix_transforms Date: 2017-07-13T22:50:17+02:00 Author: MrTango (MrTango) <md-r4/[email protected]> Commit: https://github.com/plone/Products.PortalTransforms/commit/88cf99bfe87b0522a73c9d27ae71825619f940f5 Add more test for nasty tags Files changed: M Products/PortalTransforms/tests/test_transforms.py diff --git a/Products/PortalTransforms/tests/test_transforms.py b/Products/PortalTransforms/tests/test_transforms.py index 0b79fd7..9795b77 100644 --- a/Products/PortalTransforms/tests/test_transforms.py +++ b/Products/PortalTransforms/tests/test_transforms.py @@ -202,15 +202,25 @@ def setUp(self): self.settings = registry.forInterface( IFilterSchema, prefix="plone") self.settings.valid_tags.append('style') + self.settings.valid_tags.remove('h1') + self.settings.nasty_tags.append('h1') def tearDown(self): self.settings.valid_tags.remove('style') + self.settings.valid_tags.append('h1') def test_kill_nasty_tags_which_are_not_valid(self): self.assertTrue('script' in self.settings.nasty_tags) self.assertFalse('script' in self.settings.valid_tags) - orig = '<script>foo</script>' - data_out = '' + orig = '<p><script>foo</script></p>' + data_out = '<p/>' + data = self.pt.convertTo(target_mimetype='text/x-html-safe', orig=orig) + self.assertEqual(data.getData(), data_out) + + self.assertTrue('h1' in self.settings.nasty_tags) + self.assertFalse('h1' in self.settings.valid_tags) + orig = '<p><h1>foo</h1></p>' + data_out = '<p/>' data = self.pt.convertTo(target_mimetype='text/x-html-safe', orig=orig) self.assertEqual(data.getData(), data_out) ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot