10 lines
303 B
Python
10 lines
303 B
Python
from __future__ import annotations
|
|
|
|
from app.modules.content.service import sanitize_html
|
|
|
|
|
|
def test_sanitize_html_strips_javascript_protocol():
|
|
raw = '<a href="javascript:alert(1)">x</a><img src="javascript:alert(1)" alt="x" />'
|
|
clean = sanitize_html(raw)
|
|
assert "javascript:" not in clean
|