From 4081e2c9ac54eb925ec6d5d18e21f16f81542136 Mon Sep 17 00:00:00 2001 From: Georgios Kalpakas <g.kalpakas@hotmail.com> Date: Fri, 24 Oct 2014 03:35:34 +0300 Subject: [PATCH] test(ngSanitize): enhance test regarding the `xlink:href` attribute --- test/ngSanitize/sanitizeSpec.js | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/test/ngSanitize/sanitizeSpec.js b/test/ngSanitize/sanitizeSpec.js index cfbd23947b94..69eb8a9f0ff2 100644 --- a/test/ngSanitize/sanitizeSpec.js +++ b/test/ngSanitize/sanitizeSpec.js @@ -246,6 +246,15 @@ describe('HTML', function() { it('should sanitize SVG xmlns:xlink attribute values', function() { expectHTML('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a xmlns:xhref="javascript:alert()"></a></svg>') .toEqual('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a></a></svg>'); + + expectHTML('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a xmlns:xhref="https://example.com"></a></svg>') + .toEqual('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a></a></svg>'); + + expectHTML('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a xlink:href="javascript:alert()"></a></svg>') + .toEqual('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a></a></svg>'); + + expectHTML('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a xlink:href="https://example.com"></a></svg>') + .toEqual('<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><a xlink:href="https://example.com"></a></svg>'); }); describe('htmlSanitizerWriter', function() {