| Quellcodebibliothek Statistik Leitseite products/Sources/formale Sprachen/C/Firefox/dom/base/test/ (Browser von der Mozilla Stiftung Version 136.0.1©) Datei vom 10.2.2025 mit Größe 10 kB |
|
Quelle test_bug650776.htmlSprache: HTML |
|||||||||||||||||
<!DOCTYPE HTML> <html> <!-- https://bugzilla.mozilla.org/show_bug.cgi?id=650776 --> <head> <meta charset="utf-8"> <title>Test for Bug 650776</title> <script src="/tests/SimpleTest/SimpleTest.js"></script> <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/> </head> <body> <a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=650776">Mozill <pre id="test"> <script type="application/javascript"> /** Test for Bug 650776 **/ var u = SpecialPowers.Ci.nsIParserUtils; var s = SpecialPowers.ParserUtils; // Basic sanity is(s.sanitize("foo", 0), "<html><head></head><body>foo</body></html>", "Wrong sanitizer result 1") // Scripts get removed is(s.sanitize("<script>\u003c/script>", 0), "<html><head></head><body></body></html>", "Wrong sanit // Event handlers get removed is(s.sanitize("<a onclick='boom()'></a>", 0), "<html><head></head><body><a></a></body></html>", "Wrong sa // By default, styles are removed is(s.sanitize("<style>p { color: red; }</style><p style='background-color: blue;'></p>", 0), "<ht // Can allow styles is(s.sanitize("<style>p { color: red; }</style><p style='background-color: blue;'></p>", u.Sani // -moz-binding used to get dropped, but no longer does. is(s.sanitize("<style>p { color: red; -moz-binding: url(foo); }</style><p style='background- // Various cid: embeds only cases is(s.sanitize("<img src='foo.html'>", u.SanitizerCidEmbedsOnly), '<html><head></head><body><im is(s.sanitize("<img src='cid:foo'>", u.SanitizerCidEmbedsOnly), '<html><head></head><body><img is(s.sanitize("<img src='data:image/png,'>", u.SanitizerCidEmbedsOnly), '<html><head></hea is(s.sanitize("<img src='http://mochi.test/'>", u.SanitizerCidEmbedsOnly), '<html><head></ is(s.sanitize("<a href='http://mochi.test/'></a>", u.SanitizerCidEmbedsOnly), '<html><head>< is(s.sanitize("<body background='http://mochi.test/'>", u.SanitizerCidEmbedsOnly), '<h is(s.sanitize("<body background='cid:foo'>", u.SanitizerCidEmbedsOnly), '<html><head></hea is(s.sanitize("<svg></svg>", u.SanitizerCidEmbedsOnly), '<html><head></head><body></body></html>', is(s.sanitize("<math definitionURL='cid:foo' altimg='cid:foo'></math>", u.SanitizerCidE is(s.sanitize("<video><source src='http://mochi.test/'></video>", u.SanitizerCidEmbedsOn is(s.sanitize("<style></style>", u.SanitizerAllowStyle | u.SanitizerCidEmbedsOnly), '<htm // Dangerous links is(s.sanitize("<a href='javascript:boom()'></a>", 0), "<html><head></head><body><a></a></body></html>", is(s.sanitize("<a href='JavaScript:boom()'></a>", 0), "<html><head></head><body><a></a></body></html>", is(s.sanitize("<a href=' javascript:boom()'></a>", 0), "<html><head></head><body><a></a></body></html>", is(s.sanitize("<a href='\njavascript:boom()'></a>", 0), "<html><head></head><body><a></a></body></html> is(s.sanitize("<a href='\fjavascript:boom()'></a>", 0), "<html><head></head><body><a></a></body></html> is(s.sanitize("<a href='\u00A0javascript:boom()'></a>", 0), "<html><head></head><body><a></a></body></ is(s.sanitize("<a href='foo.html'></a>", 0), "<html><head></head><body><a></a></body></html>", "Wrong san // Comments is(s.sanitize("<!-- foo -->", 0), "<html><head></head><body></body></html>", "Wrong sanitizer result 2 is(s.sanitize("<!-- foo -->", u.SanitizerAllowComments), "<!-- foo -->\n<html><head></head><body></ // noscript is(s.sanitize("<body><noscript><p class=bar>foo</p></noscript>", 0), '<html><head></head><body><noscri // dangerous elements is(s.sanitize("<iframe></iframe>", 0), "<html><head></head><body></body></html>", "Wrong sanitizer re is(s.sanitize("<object></object>", 0), "<html><head></head><body></body></html>", "Wrong sanitizer re is(s.sanitize("<embed>", 0), "<html><head></head><body></body></html>", "Wrong sanitizer result 29") // presentationalism is(s.sanitize("<font></font>", 0), "<html><head></head><body><font></font></body></html>", "Wrong saniti is(s.sanitize("<center></center>", 0), "<html><head></head><body><center></center></body></html>", "Wro is(s.sanitize("<div align=center></div>", 0), '<html><head></head><body><div align="center"></div></b is(s.sanitize("<table><tr><td bgcolor=#FFFFFF>", 0), '<html><head></head><body><table><tbody><tr><td bgco is(s.sanitize("<font></font>", u.SanitizerDropNonCSSPresentation), "<html><head></head><body></ is(s.sanitize("<center></center>", u.SanitizerDropNonCSSPresentation), "<html><head></head><b is(s.sanitize("<div align=center></div>", u.SanitizerDropNonCSSPresentation), '<html><head>< is(s.sanitize("<table><tr><td bgcolor=#FFFFFF>", u.SanitizerDropNonCSSPresentation), '<htm // metadata is(s.sanitize("<meta charset=utf-7>", 0), "<html><head></head><body></body></html>", "Wrong sanitiz is(s.sanitize("<meta http-equiv=content-type content='text/html; charset=utf-7'>", 0), is(s.sanitize("<meta itemprop=foo content=bar>", 0), '<html><head><meta itemprop="foo" conten is(s.sanitize("<link rel=whatever href=http://mochi.test/ >", 0), '<html><head></head><body></bo is(s.sanitize("<link itemprop=foo href=http://mochi.test/ >", 0), '<html><head><link itemprop is(s.sanitize("<link rel=stylesheet itemprop=foo href=http://mochi.test/ >", 0), '<html><he is(s.sanitize("<meta name=foo content=bar>", 0), '<html><head><meta name="foo" content="bar"></ // forms is(s.sanitize("<form></form>", 0), '<html><head></head><body><form></form></body></html>', "Wrong saniti is(s.sanitize("<fieldset><legend></legend></fieldset>", 0), '<html><head></head><body><fieldset><lege is(s.sanitize("<input>", 0), '<html><head></head><body><input></body></html>', "Wrong sanitizer resul is(s.sanitize("<button>foo</button>", 0), '<html><head></head><body><button>foo</button></body></html> is(s.sanitize("<select><optgroup><option>foo</option></optgroup></select></button>", 0), '<html><he is(s.sanitize("<form></form>", u.SanitizerDropForms), '<html><head></head><body></body></html>', "W is(s.sanitize("<fieldset><legend></legend></fieldset>", u.SanitizerDropForms), '<html><head></h is(s.sanitize("<input>", u.SanitizerDropForms), '<html><head></head><body></body></html>', "Wrong is(s.sanitize("<button>foo</button>", u.SanitizerDropForms), '<html><head></head><body></body></h is(s.sanitize("<select><optgroup><option>foo</option></optgroup></select></button>", u.Sanitize // doctype is(s.sanitize("<!DOCTYPE html>", 0), '<!DOCTYPE html>\n<html><head></head><body></body></html>', "Wro // title is(s.sanitize("<title></title>", 0), '<html><head><title></title></head><body></body></html>', "Wrong sa // Drop media is(s.sanitize("<img>", u.SanitizerDropMedia), '<html><head></head><body></body></html>', "Wrong sa is(s.sanitize("<svg>foo</svg>", u.SanitizerDropMedia), '<html><head></head><body>foo</body></html> is(s.sanitize("<video><source></video>", u.SanitizerDropMedia), '<html><head></head><body></body></ is(s.sanitize("<audio><source></audio>", u.SanitizerDropMedia), '<html><head></head><body></body></ // disallow 'formaction' attributes is(s.sanitize("<input formaction='http://mochi.test/'>", 0), '<html><head></head><body><input></ // disallow 'ping' attributes is(s.sanitize("<a ping='http://mochi.test/'></a>", 0), "<html><head></head><body><a></a></body></html>" </script> </pre> </body> </html>
¤ Dauer der Verarbeitung: 0.23 Sekunden (vorverarbeitet am 2026-04-29) ¤*© Formatika GbR, Deutschland |
|
||||||||||||||||
2026-05-26