Python MarkupRenderer.rst Examples

Example #1

def test_rst_xss_raw_directive():
    xss_rst = '\n'.join([
        '.. raw:: html', '',
        '  <a href="javascript:alert(\'XSS: pwned!\')">link</a>'
    ])
    rendered_html = MarkupRenderer.rst(xss_rst)
    assert 'href="javascript:alert(' not in rendered_html

Example #2

File: helpers.py Project: elfixit/rhodecode

def rst(source):
    return literal('<div class="rst-block">%s</div>' %
                   MarkupRenderer.rst(source))

Example #3

File: helpers.py Project: greenboxindonesia/rhodecode

def rst(source):
    return literal('<div class="rst-block">%s</div>' %
                   MarkupRenderer.rst(source))

Example #4

def test_rst_xss_inline_html():
    xss_rst = '<a href="javascript:alert(\'XSS: pwned!\')">link</a>'
    rendered_html = MarkupRenderer.rst(xss_rst)
    assert 'href="javascript:alert(' not in rendered_html

Example #5

def test_rst_xss_link():
    xss_rst = "`Link<javascript:alert('XSS: pwned!')>`_"
    rendered_html = MarkupRenderer.rst(xss_rst)
    assert "href=javascript:alert('XSS: pwned!')" not in rendered_html