require 'helper' class TestSlimCodeEscaping < TestSlim def test_escaping_evil_method source = %q{ p = evil_method } assert_html '

<script>do_something_evil();</script>

', source end def test_render_without_html_safe source = %q{ p = "Hello World\\n, meet \\"Slim\\"." } assert_html "

<strong>Hello World\n, meet \"Slim\"</strong>.

", source end def test_render_with_html_safe_false source = %q{ p = HtmlUnsafeString.new("Hello World\\n, meet \\"Slim\\".") } assert_html "

<strong>Hello World\n, meet \"Slim\"</strong>.

", source, :use_html_safe => true end def test_render_with_html_safe_true source = %q{ p = HtmlSafeString.new("Hello World\\n, meet \\"Slim\\".") } assert_html "

Hello World\n, meet \"Slim\".

", source, :use_html_safe => true end def test_render_with_disable_escape_false source = %q{ = "

Hello

" == "

World

" } assert_html "<p>Hello</p>

World

", source end def test_render_with_disable_escape_true source = %q{ = "

Hello

" == "

World

" } assert_html "

Hello

World

", source, :disable_escape => true end end