mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/Popups
synced 2024-11-19 05:15:52 +00:00
b24e39e9fc
Add test for XSS attack Bug: T69180 Change-Id: I213169bd9daed979e63f50cf3926f7196eb6181c
52 lines
1.1 KiB
JavaScript
52 lines
1.1 KiB
JavaScript
( function ( $, mw ) {
|
|
|
|
QUnit.module( 'ext.popups' );
|
|
QUnit.test( 'render.article.getProcessedHtml', function ( assert ) {
|
|
QUnit.expect( 7 );
|
|
|
|
function test ( extract, title, expected ) {
|
|
assert.equal(
|
|
mw.popups.render.article.getProcessedHtml( extract, title ),
|
|
expected
|
|
);
|
|
}
|
|
|
|
test(
|
|
'Isaac Newton was born in', 'Isaac Newton',
|
|
'<b>Isaac Newton</b> was born in'
|
|
);
|
|
|
|
test(
|
|
'The C* language not to be confused with C# or C', 'C*',
|
|
'The <b>C*</b> language not to be confused with C# or C'
|
|
);
|
|
|
|
test(
|
|
'Person (was born in Location) is good', 'Person',
|
|
'<b>Person</b> is good'
|
|
);
|
|
|
|
test(
|
|
'Person (was born in Location (at Time)) is good', 'Person',
|
|
'<b>Person</b> is good'
|
|
);
|
|
|
|
test(
|
|
'Person (was born in Location (at Time) ) is good', 'Person',
|
|
'<b>Person</b> is good'
|
|
);
|
|
|
|
test(
|
|
'Brackets ) are funny ( when not used properly', 'Brackets',
|
|
'<b>Brackets</b> ) are funny ( when not used properly'
|
|
);
|
|
|
|
test(
|
|
'Epic XSS <script>alert("XSS")</script> is epic', 'Epic XSS',
|
|
'<b>Epic XSS</b> <script>alert</script> is epic'
|
|
);
|
|
|
|
} );
|
|
|
|
} ) ( jQuery, mediaWiki );
|