from __future__ import annotations

from app.modules.content.service import sanitize_html


def test_sanitize_html_strips_javascript_protocol():
    raw = '<a href="javascript:alert(1)">x</a><img src="javascript:alert(1)" alt="x" />'
    clean = sanitize_html(raw)
    assert "javascript:" not in clean