JSONContent: Add HTML escaping test from EventLogging
authorKunal Mehta <legoktm@gmail.com>
Sat, 9 Aug 2014 10:51:11 +0000 (11:51 +0100)
committerKunal Mehta <legoktm@gmail.com>
Sat, 9 Aug 2014 10:54:59 +0000 (11:54 +0100)
Change-Id: I73908c7614b39bdab953aec079c8dfb991fa463b

tests/phpunit/includes/content/JSONContentTest.php

index df8d2e2..ec74574 100644 (file)
@@ -106,6 +106,10 @@ class JSONContentTest extends MediaWikiLangTestCase {
                                "\n" .
                                '<tr><th>0</th><td class="value">&quot;bar&quot;</td></tr></tbody></table>'
                        ),
+                       array(
+                               array( '<script>alert("evil!")</script>'),
+                               '<table class="mw-json"><tbody><tr><th>0</th><td class="value">&quot;&lt;script&gt;alert(&quot;evil!&quot;)&lt;/script&gt;&quot;</td></tr></tbody></table>',
+                       ),
                );
        }