添加HTML备注处理测试代码

2014-09-12 12:23:36 +08:00
parent 6c6f640584
commit 8a08cea378
1 changed files with 6 additions and 0 deletions
--- a/test/test_xss.js
+++ b/test/test_xss.js
@@ -184,6 +184,12 @@ describe('test XSS', function () {
    assert.equal(xss('<img src="data: aaa/text;">'), '<img src>');
    assert.equal(xss('<img src="data:image/png; base64; ofdkofiodiofl">'), '<img src>');

+    // HTML备注处理
+    assert.equal(xss('<!--                               -->', {allowCommentTag: false}), '');
+    assert.equal(xss('<!--      a           -->', {allowCommentTag: false}), '');
+    assert.equal(xss('<!--sa       -->ss', {allowCommentTag: false}), 'ss');
+    assert.equal(xss('<!--                               ', {allowCommentTag: false}), '&lt;!--                               ');
+
  });

 });