Contents

require 'test_helper'

class SafeRenderTest < Redcarpet::TestCase
  def setup
    @renderer = Redcarpet::Render::Safe
  end

  def test_safe_links_only_is_enabled_by_default
    markdown = "[foo](javascript:alert('foo'))"
    output   = render(markdown)

    assert_not_match %r{a href}, output
  end

  def test_escape_html_is_enabled_by_default
    markdown = "<p>Hello world!</p>"
    output   = render(markdown)

    assert_match %r{&lt;}, output
  end

  def test_html_escaping_in_code_blocks
    markdown = "~~~\n<p>Hello!</p>\n~~~"
    output   = render(markdown)

    assert_match %r{&lt;p&gt;}, output
  end

  def test_lang_class_is_removed
    markdown = "~~~ruby\nclass Foo; end\n~~~"
    output   = render(markdown, with: [:fenced_code_blocks])

    assert_not_match %r{ruby}, output
  end
end

Version data entries

71 entries across 56 versions & 9 rubygems

Version	Path
redcarpet_yt-0.0.8	test/safe_render_test.rb
redcarpet_yt-0.0.7	test/safe_render_test.rb
redcarpet_yt-0.0.6	test/safe_render_test.rb
redcarpet_yt-0.0.5	test/safe_render_test.rb
redcarpet_yt-0.0.4	test/safe_render_test.rb
redcarpet_yt-0.0.3	test/safe_render_test.rb
redcarpet_yt-0.0.2	test/safe_render_test.rb
redcarpet_yt-0.0.1	test/safe_render_test.rb
redcarpet-3.3.4	test/safe_render_test.rb
redcarpet-3.3.3	test/safe_render_test.rb
tight-redcarpet-3.3.2t	test/safe_render_test.rb