mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-13 04:22:07 +02:00
Code Issues Projects Releases Wiki Activity

MDL-55581 htmlpurifier: test for attributes in video tag

Browse Source
This commit is contained in:
Marina Glancy 2016-08-30 13:44:13 +08:00
parent bb75b82e21
commit 0df9dce716
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
lib/tests/htmlpurifier_test.php
View File

@ -448,7 +448,7 @@ class core_htmlpurifier_testcase extends basic_testcase {
'No tasty jams for you.' .
'</video>' .
'</div>'
]) + $generatetestcases('Video with invalid crossorigin', $videoattrs, [
]) + ['Video with invalid crossorigin' => [
'<video src="http://example.com/turnitup.mov" crossorigin="can i pls hab?">' .
'Oh, that\'s pretty bad 😦' .
'</video>',
@ -457,7 +457,7 @@ class core_htmlpurifier_testcase extends basic_testcase {
'Oh, that\'s pretty bad 😦' .
'</video>' .
'</div>'
]) + $generatetestcases('Audio with invalid crossorigin', $audioattrs, [
]] + ['Audio with invalid crossorigin' => [
'<audio src="http://example.com/getup.wav" crossorigin="give me. the jams.">' .
'nyemnyemnyem' .
'</audio>',
@ -466,6 +466,19 @@ class core_htmlpurifier_testcase extends basic_testcase {
'nyemnyemnyem' .
'</audio>' .
'</div>'
]);
]] + ['Other attributes' => [
'<video src="http://example.com/turnitdown.mov" class="nofilter" data-something="data attribute" someattribute="somevalue" onclick="boom">' .
'<source src="http://example.com/getup.wav" type="audio/wav" class="shouldberemoved" data-sourcedata="source data" onmouseover="kill session" />' .
'<track src="http://example.com/subtitles_en.vtt" class="shouldberemoved" data-trackdata="track data" onmouseover="removeme" />' .
'Do not remove attribute class but remove other attributes' .
'</video>',
'<div class="text_to_html">' .
'<video src="http://example.com/turnitdown.mov" class="nofilter">' .
'<source src="http://example.com/getup.wav" type="audio/wav" />' .
'<track src="http://example.com/subtitles_en.vtt" />' .
'Do not remove attribute class but remove other attributes' .
'</video>' .
'</div>'
]];
}
}