use markdown::to_html; use pretty_assertions::assert_eq; #[test] fn dangerous_protocol_autolink() { assert_eq!( to_html(""), "

javascript:alert(1)

", "should be safe by default" ); assert_eq!( to_html(""), "

http://a

", "should allow `http:`" ); assert_eq!( to_html(""), "

https://a

", "should allow `https:`" ); assert_eq!( to_html(""), "

irc:///help

", "should allow `irc:`" ); assert_eq!( to_html(""), "

mailto:a

", "should allow `mailto:`" ); } #[test] fn dangerous_protocol_image() { assert_eq!( to_html("![](javascript:alert(1))"), "

\"\"

", "should be safe by default" ); assert_eq!( to_html("![](http://a)"), "

\"\"

", "should allow `http:`" ); assert_eq!( to_html("![](https://a)"), "

\"\"

", "should allow `https:`" ); assert_eq!( to_html("![](irc:///help)"), "

\"\"

", "should not allow `irc:`" ); assert_eq!( to_html("![](mailto:a)"), "

\"\"

", "should not allow `mailto:`" ); assert_eq!( to_html("![](#a)"), "

\"\"

", "should allow a hash" ); assert_eq!( to_html("![](?a)"), "

\"\"

", "should allow a search" ); assert_eq!( to_html("![](/a)"), "

\"\"

", "should allow an absolute" ); assert_eq!( to_html("![](./a)"), "

\"\"

", "should allow an relative" ); assert_eq!( to_html("![](../a)"), "

\"\"

", "should allow an upwards relative" ); assert_eq!( to_html("![](a#b:c)"), "

\"\"

", "should allow a colon in a hash" ); assert_eq!( to_html("![](a?b:c)"), "

\"\"

", "should allow a colon in a search" ); assert_eq!( to_html("![](a/b:c)"), "

\"\"

", "should allow a colon in a path" ); } #[test] fn dangerous_protocol_link() { assert_eq!( to_html("[](javascript:alert(1))"), "

", "should be safe by default" ); assert_eq!( to_html("[](http://a)"), "

", "should allow `http:`" ); assert_eq!( to_html("[](https://a)"), "

", "should allow `https:`" ); assert_eq!( to_html("[](irc:///help)"), "

", "should allow `irc:`" ); assert_eq!( to_html("[](mailto:a)"), "

", "should allow `mailto:`" ); assert_eq!( to_html("[](#a)"), "

", "should allow a hash" ); assert_eq!( to_html("[](?a)"), "

", "should allow a search" ); assert_eq!( to_html("[](/a)"), "

", "should allow an absolute" ); assert_eq!( to_html("[](./a)"), "

", "should allow an relative" ); assert_eq!( to_html("[](../a)"), "

", "should allow an upwards relative" ); assert_eq!( to_html("[](a#b:c)"), "

", "should allow a colon in a hash" ); assert_eq!( to_html("[](a?b:c)"), "

", "should allow a colon in a search" ); assert_eq!( to_html("[](a/b:c)"), "

", "should allow a colon in a path" ); }