diff options
| author | David Heinemeier Hansson <david@loudthinking.com> | 2008-03-28 19:45:32 +0000 |
|---|---|---|
| committer | David Heinemeier Hansson <david@loudthinking.com> | 2008-03-28 19:45:32 +0000 |
| commit | c57254d44930f43ccf300e8906bd46bd5aaf8ed3 (patch) | |
| tree | 714ef6edded6cb6b0c4e400d03723bb7073e75b9 /actionpack/test | |
| parent | bdd88810c1edf8289801f88170eb5c9659b2f774 (diff) | |
| download | rails-c57254d44930f43ccf300e8906bd46bd5aaf8ed3.tar.gz rails-c57254d44930f43ccf300e8906bd46bd5aaf8ed3.tar.bz2 rails-c57254d44930f43ccf300e8906bd46bd5aaf8ed3.zip | |
Fixed HTML::Tokenizer (used in sanitize helper) didnt handle unclosed CDATA tags (closes #10071) [esad, packagethief]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@9111 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
Diffstat (limited to 'actionpack/test')
| -rw-r--r-- | actionpack/test/controller/html-scanner/tokenizer_test.rb | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/actionpack/test/controller/html-scanner/tokenizer_test.rb b/actionpack/test/controller/html-scanner/tokenizer_test.rb index 53f032ac17..a001bcbbad 100644 --- a/actionpack/test/controller/html-scanner/tokenizer_test.rb +++ b/actionpack/test/controller/html-scanner/tokenizer_test.rb @@ -78,6 +78,13 @@ class TokenizerTest < Test::Unit::TestCase assert_end end + def test_unterminated_cdata_tag + tokenize %{<content:encoded><![CDATA[ neverending...} + assert_next %{<content:encoded>} + assert_next %{<![CDATA[ neverending...} + assert_end + end + def test_less_than_with_space tokenize %{original < hello > world} assert_next %{original } |