def test_markdown_render_doesnt_allow_any_explicit_anchors(self): expected = '<p>foo</p>\n' assert markdown.render('<a href="http://example.com/">foo</a>') == expected expected = '<p>foo</p>\n' assert markdown.render('<a href="https://example.com/">foo</a>') == expected expected = '<p>foo</p>\n' assert markdown.render('<a href="javascript:foo">foo</a>') == expected
def test_markdown_render_escapes_javascript_links(self): expected = '<p>[foo](javascript:foo)</p>\n' assert markdown.render('[foo](javascript:foo)') == expected expected = '<p><javascript:foo></p>\n' assert markdown.render('<javascript:foo>') == expected
def test_markdown_render_escapes_scripts(self): expected = '<p>Example alert “hi”;</p>\n' actual = markdown.render('Example <script>alert "hi";</script>') assert expected == actual
def test_markdown_render_renders_https_links(self): expected = '<p><a href="https://example.com/">foo</a></p>\n' assert markdown.render('[foo](https://example.com/)') == expected expected = '<p><a href="https://example.com/">https://example.com/</a></p>\n' assert markdown.render('<https://example.com/>') == expected
def test_render_does_not_render_entity_references_it_really_is_striptags(self): assert markdown.render('™') == '<p>™</p>\n' assert markdown.render_and_scrub('™') == '\u2122'
def test_markdown_render_does_render(self): expected = "<p>Example</p>\n" actual = markdown.render('Example') assert expected == actual
def test_no_intra_emphasis(self): expected = '<p>Examples like this_one and this other_one.</p>\n' actual = markdown.render('Examples like this_one and this other_one.') assert expected == actual
def test_escapes_javascript_links(self): expected = '<p>[foo](javascript:foo)</p>\n' assert markdown.render('[foo](javascript:foo)') == expected expected = '<p><javascript:foo></p>\n' assert markdown.render('<javascript:foo>') == expected
def test_autolinks(self): expected = '<p><a href="http://google.com/">http://google.com/</a></p>\n' actual = markdown.render('http://google.com/') assert expected == actual
def test_renders_https_links(self): expected = '<p><a href="https://example.com/">foo</a></p>\n' assert markdown.render('[foo](https://example.com/)') == expected expected = '<p><a href="https://example.com/">https://example.com/</a></p>\n' assert markdown.render('<https://example.com/>') == expected
def test_escapes_scripts(self): expected = '<p>Example alert “hi”;</p>\n' actual = markdown.render('Example <script>alert "hi";</script>') assert expected == actual
def test_markdown_render_autolinks(self): expected = '<p><a href="http://google.com/">http://google.com/</a></p>\n' actual = markdown.render('http://google.com/') assert expected == actual
def test_returns_a_Markup(self): assert type(markdown.render('&')) is markdown.Markup
def test_markdown_render_no_intra_emphasis(self): expected = '<p>Examples like this_one and this other_one.</p>\n' actual = markdown.render('Examples like this_one and this other_one.') assert expected == actual