test/devcenter-parser_test.rb in devcenter-parser-2.0.2 vs test/devcenter-parser_test.rb in devcenter-parser-2.1.0

@@ -419,9 +419,18 @@
 <p>Text for first step</p>
 HTML
 
       assert_parsing_result md, html
     end
+
+    it 'removes elements with src="javascript:"' do
+      md = <<-MARKDOWN
+<iframe src="javascript:">alert("foo");</iframe>
+<img src="javascript:" />
+      MARKDOWN
+
+      assert_parsing_result md, "<p></p>"
+    end
   end
 
 
   # helpers