mirror/php-htmlpurifier
1
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-07-30 19:00:10 +02:00
Code Issues Releases Wiki Activity

[2.0.1] Fix DirectLex's incomprehension of un-armored script contents as CDATA using custom preg_replace_callback

Browse Source 
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@1244 48356398-32a2-884e-a903-53898d9a118a
This commit is contained in:
Edward Z. Yang
2007-06-26 16:08:42 +00:00
parent ae90bb919d
commit 275932ec05
4 changed files with 28 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
tests/HTMLPurifier/HTMLModule/ScriptingTest.php
View File

@@ -46,13 +46,6 @@ alert("<This is compatible with XHTML>");
array('HTML.Trusted' => true, 'Core.CommentScriptContents' => false)
);
// invalid children
$this->assertResult(
'<script type="text/javascript">PCDATA<span</script>',
'<script type="text/javascript">PCDATA</script>',
array('HTML.Trusted' => true, 'Core.CommentScriptContents' => false)
);
}
}

11
tests/HTMLPurifier/LexerTest.php
View File

@@ -315,6 +315,17 @@ class HTMLPurifier_LexerTest extends UnitTestCase
$sax_expect[21] = false;
$dom_expect[21] = false;
// test CDATA tags
$input[22] = '<script>alert("<foo>");</script>';
$expect[22] = array(
new HTMLPurifier_Token_Start('script')
,new HTMLPurifier_Token_Text('alert("<foo>");')
,new HTMLPurifier_Token_End('script')
);
$config[22] = HTMLPurifier_Config::create(array('HTML.Trusted' => true));
$sax_expect[22] = false;
//$dom_expect[22] = false;
$default_config = HTMLPurifier_Config::createDefault();
$default_context = new HTMLPurifier_Context();
foreach($input as $i => $discard) {