def test_html(self):
parser = XMLParser(
'<p xmlns="http://www.w3.org/1999/xhtml">Bed&Breakfast</p>')
out = stream_to_html(parser)
# Assert
self.assertEqual(out,
'<p xmlns="http://www.w3.org/1999/xhtml">Bed&Breakfast</p>')
def test_html(self):
parser = XMLParser(
'<p xmlns="http://www.w3.org/1999/xhtml">Bed&Breakfast</p>')
out = stream_to_html(parser)
# Assert
self.assertEqual(
out,
'<p xmlns="http://www.w3.org/1999/xhtml">Bed&Breakfast</p>')
def test_stream_to_html_escape(self):
parser = XMLParser('<p xmlns="http://www.w3.org/1999/xhtml"></p>')
events = list(parser)
events.insert(1, (xml_TEXT, '<br/>', 0))
self.assertEqual(
stream_to_html(events),
'<p xmlns="http://www.w3.org/1999/xhtml"><br/></p>')
def test_stream_to_html_escape(self):
parser = XMLParser('<p xmlns="http://www.w3.org/1999/xhtml"></p>')
events = list(parser)
events.insert(1, (xml_TEXT, '<br/>', 0))
self.assertEqual(
stream_to_html(events),
'<p xmlns="http://www.w3.org/1999/xhtml"><br/></p>')
def test_comment(self):
data = '<!-- javascript:alert("Hello"); -->'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = ''
self.assertEqual(data_return, expected)
def test_links(self):
data = '<a href="javascript:alert(\'Hello\')">Hello World</a>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<a>Hello World</a>'
self.assertEqual(data_return, expected)
def test_onmouseover(self):
data = '<b onMouseOver="self.location.href=\'www.free.fr\'">Hello</b>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<b>Hello</b>'
self.assertEqual(data_return, expected)
def test_css(self):
data = '<div style="background: url(javascript:void);"></div>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<div></div>'
self.assertEqual(data_return, expected)
def test_javascript(self):
data = '<div><script>alert("Hello world")</script></div>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<div></div>'
self.assertEqual(data_return, expected)
def test_comment(self):
data = '<!-- javascript:alert("Hello"); -->'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = ''
self.assertEqual(data_return, expected)
def test_links(self):
data = '<a href="javascript:alert(\'Hello\')">Hello World</a>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<a>Hello World</a>'
self.assertEqual(data_return, expected)
def test_onmouseover(self):
data = '<b onMouseOver="self.location.href=\'www.free.fr\'">Hello</b>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<b>Hello</b>'
self.assertEqual(data_return, expected)
def test_css(self):
data = '<div style="background: url(javascript:void);"></div>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<div></div>'
self.assertEqual(data_return, expected)
def test_javascript(self):
data = '<div><script>alert("Hello world")</script></div>'
stream = sanitize_str(data)
data_return = stream_to_html(stream)
expected = '<div></div>'
self.assertEqual(data_return, expected)
