Admin Control Panel v2.0

✎ Editing: RemoveForeignElementsTest.php ← Back

<?php

class HTMLPurifier_Strategy_RemoveForeignElementsTest extends HTMLPurifier_StrategyHarness

{

public function setUp()

{

parent::setUp();

$this->obj = new HTMLPurifier_Strategy_RemoveForeignElements();

}

public function testBlankInput()

{

$this->assertResult('');

}

public function testPreserveRecognizedElements()

{

$this->assertResult('This is <b>bold text</b>.');

}

public function testRemoveForeignElements()

{

$this->assertResult(

'<asdf>Bling</asdf><d href="bang">Bong</d><foobar />',

'BlingBong'

);

}

public function testRemoveScriptAndContents()

{

$this->assertResult(

'<script>alert();</script>',

);

}

public function testRemoveStyleAndContents()

{

$this->assertResult(

'<style>.foo {blink;}</style>',

);

}

public function testRemoveOnlyScriptTagsLegacy()

{

$this->config->set('Core.RemoveScriptContents', false);

$this->assertResult(

'<script>alert();</script>',

'alert();'

);

}

public function testRemoveOnlyScriptTags()

{

$this->config->set('Core.HiddenElements', array());

$this->assertResult(

'<script>alert();</script>',

'alert();'

);

}

public function testRemoveInvalidImg()

{

$this->assertResult('<img />', '');

}

public function testPreserveValidImg()

{

$this->assertResult('<img src="foobar.gif" alt="foobar.gif" />');

}

public function testPreserveInvalidImgWhenRemovalIsDisabled()

{

$this->config->set('Core.RemoveInvalidImg', false);

$this->assertResult('<img />');

}

public function testTextifyCommentedScriptContents()

{

$this->config->set('HTML.Trusted', true);

$this->config->set('Output.CommentScriptContents', false); // simplify output

$this->assertResult(

'<script type="text/javascript"><!--

alert(<b>bold</b>);

// --></script>',

'<script type="text/javascript">

alert(&lt;b&gt;bold&lt;/b&gt;);

// </script>'

);

}

public function testRequiredAttributesTestNotPerformedOnEndTag()

{

$def = $this->config->getHTMLDefinition(true);

$def->addElement('f', 'Block', 'Optional: #PCDATA', false, array('req*' => 'Text'));

$this->assertResult('<f req="text">Foo</f> Bar');

}

public function testPreserveCommentsWithHTMLTrusted()

{

$this->config->set('HTML.Trusted', true);

$this->assertResult('');

}

public function testRemoveTrailingHyphensInComment()

{

$this->config->set('HTML.Trusted', true);

$this->assertResult('', '');

}

public function testCollapseDoubleHyphensInComment()

{

$this->config->set('HTML.Trusted', true);

$this->assertResult('', '');

}

public function testPreserveCommentsWithLookup()

{

$this->config->set('HTML.AllowedComments', array('allowed'));

$this->assertResult('', '');

}

public function testPreserveCommentsWithRegexp()

{

$this->config->set('HTML.AllowedCommentsRegexp', '/^allowed[1-9]$/');

$this->assertResult('', '');

}

// vim: et sw=4 sts=4

Cancel