aboutsummaryrefslogtreecommitdiffstats
path: root/actionview/test/template/text_helper_test.rb
diff options
context:
space:
mode:
authorpseidemann <paul.seidemann@gmail.com>2013-11-08 17:13:59 +0100
committerpseidemann <paul.seidemann@gmail.com>2013-11-08 17:13:59 +0100
commit881a2cc9071a3447d562ba358ccd1cf370124617 (patch)
tree97293b4c62cec987fc52a5cd22e03e19f4f1ee3d /actionview/test/template/text_helper_test.rb
parent37d4bfbfd9c49cdddcafdc135165b2d6932b074a (diff)
downloadrails-881a2cc9071a3447d562ba358ccd1cf370124617.tar.gz
rails-881a2cc9071a3447d562ba358ccd1cf370124617.tar.bz2
rails-881a2cc9071a3447d562ba358ccd1cf370124617.zip
fix simple_format escapes own output when sanitize is set to true
Diffstat (limited to 'actionview/test/template/text_helper_test.rb')
-rw-r--r--actionview/test/template/text_helper_test.rb5
1 files changed, 5 insertions, 0 deletions
diff --git a/actionview/test/template/text_helper_test.rb b/actionview/test/template/text_helper_test.rb
index c2999fcb85..c624326683 100644
--- a/actionview/test/template/text_helper_test.rb
+++ b/actionview/test/template/text_helper_test.rb
@@ -42,6 +42,11 @@ class TextHelperTest < ActionView::TestCase
assert_equal "<p><b> test with unsafe string </b></p>", simple_format("<b> test with unsafe string </b><script>code!</script>")
end
+ def test_simple_format_should_sanitize_input_when_sanitize_option_is_true
+ assert_equal '<p><b> test with unsafe string </b></p>',
+ simple_format('<b> test with unsafe string </b><script>code!</script>', {}, sanitize: true)
+ end
+
def test_simple_format_should_not_sanitize_input_when_sanitize_option_is_false
assert_equal "<p><b> test with unsafe string </b><script>code!</script></p>", simple_format("<b> test with unsafe string </b><script>code!</script>", {}, :sanitize => false)
end