18 lines
516 B
Rust
18 lines
516 B
Rust
use warpui::browser::escape_html_attribute;
|
|
|
|
#[test]
|
|
fn escape_html_attribute_escapes_attribute_breakout_characters() {
|
|
assert_eq!(
|
|
escape_html_attribute("\" onload=\"alert(1)\" data-x='><script>alert(1)</script>&"),
|
|
"" onload="alert(1)" data-x='><script>alert(1)</script>&"
|
|
);
|
|
}
|
|
|
|
#[test]
|
|
fn escape_html_attribute_leaves_safe_text_unchanged() {
|
|
assert_eq!(
|
|
escape_html_attribute("embedded warp block"),
|
|
"embedded warp block"
|
|
);
|
|
}
|