Added some test coverage for PermitScrubber.

1 files changed, 80 insertions, 0 deletions

diff --git a/actionview/test/template/scrubbers/scrubbers_test.rb b/actionview/test/template/scrubbers/scrubbers_test.rb
new file mode 100644
index 0000000000..15df5b8e22
--- /dev/null
+++ b/actionview/test/template/scrubbers/scrubbers_test.rb
@@ -0,0 +1,80 @@
+require 'loofah'
+require 'abstract_unit'
+
+class PermitScrubberTest < ActionView::TestCase
+
+  def setup
+    @scrubber = PermitScrubber.new
+  end
+
+  def test_responds_to_scrub
+    assert @scrubber.respond_to?(:scrub)
+  end
+
+  def test_default_scrub_behavior
+    assert_scrubbed '<tag>hello</tag>', 'hello'
+  end
+
+  def test_default_attributes_removal_behavior
+    assert_scrubbed '<p cooler="hello">hello</p>', '<p>hello</p>'
+  end
+
+  def test_leaves_supplied_tags
+    @scrubber.tags = %w(a)
+    assert_scrubbed '<a>hello</a>'
+  end
+
+  def test_leaves_only_supplied_tags
+    html = '<tag>leave me <span>now</span></tag>'
+    @scrubber.tags = %w(tag)
+    assert_scrubbed html, '<tag>leave me now</tag>'
+  end
+
+  def test_leaves_only_supplied_tags_nested
+    html = '<tag>leave <em>me <span>now</span></em></tag>'
+    @scrubber.tags = %w(tag)
+    assert_scrubbed html, '<tag>leave me now</tag>'
+  end
+
+  def test_leaves_supplied_attributes
+    @scrubber.attributes = %w(cooler)
+    assert_scrubbed '<a cooler="hello"></a>'
+  end
+
+  def test_leaves_only_supplied_attributes
+    @scrubber.attributes = %w(cooler)
+    assert_scrubbed '<a cooler="hello" b="c" d="e"></a>', '<a cooler="hello"></a>'
+  end
+
+  def test_leaves_supplied_tags_and_attributes
+    @scrubber.tags = %w(tag)
+    @scrubber.attributes = %w(cooler)
+    assert_scrubbed '<tag cooler="hello"></tag>'
+  end
+
+  def test_leaves_only_supplied_tags_and_attributes
+    @scrubber.tags = %w(tag)
+    @scrubber.attributes = %w(cooler)
+    html = '<a></a><tag href=""></tag><tag cooler=""></tag>'
+    assert_scrubbed html, '<tag></tag><tag cooler=""></tag>'
+  end
+
+  def test_leaves_text
+    assert_scrubbed('some text')
+  end
+
+  def test_skips_text_nodes
+    assert_node_skipped 'some text'
+  end
+
+  protected
+    def assert_scrubbed(html, expected = html)
+      output = Loofah.scrub_fragment(html, @scrubber).to_s
+      assert_equal expected, output
+    end
+
+    def assert_node_skipped(text)
+      node = Loofah.fragment(text).children.first
+      assert_equal Loofah::Scrubber::CONTINUE, @scrubber.scrub(node)
+    end
+end
\ No newline at end of file