Blame view

vendor/ezyang/htmlpurifier/tests/HTMLPurifier/HTMLModule/SafeEmbedTest.php 1.74 KB
abf1649b   andryeyev   Чистая установка ...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
  <?php
  
  class HTMLPurifier_HTMLModule_SafeEmbedTest extends HTMLPurifier_HTMLModuleHarness
  {
  
      public function setUp()
      {
          parent::setUp();
          $def = $this->config->getHTMLDefinition(true);
          $def->manager->addModule('SafeEmbed');
      }
  
      public function testMinimal()
      {
          $this->assertResult(
              '<embed src="http://www.youtube.com/v/RVtEQxH7PWA&amp;hl=en" />',
              '<embed src="http://www.youtube.com/v/RVtEQxH7PWA&amp;hl=en" allowscriptaccess="never" allownetworking="internal" type="application/x-shockwave-flash" />'
          );
      }
  
      public function testYouTube()
      {
          $this->assertResult(
              '<embed src="http://www.youtube.com/v/RVtEQxH7PWA&amp;hl=en" type="application/x-shockwave-flash" width="425" height="344"></embed>',
              '<embed src="http://www.youtube.com/v/RVtEQxH7PWA&amp;hl=en" type="application/x-shockwave-flash" width="425" height="344" allowscriptaccess="never" allownetworking="internal" />'
          );
      }
  
      public function testMalicious()
      {
          $this->assertResult(
              '<embed src="http://example.com/bad.swf" type="application/x-shockwave-flash" width="9999999" height="3499994" allowscriptaccess="always" allownetworking="always" />',
              '<embed src="http://example.com/bad.swf" type="application/x-shockwave-flash" width="1200" height="1200" allowscriptaccess="never" allownetworking="internal" />'
          );
      }
  
      public function testFull()
      {
          $this->assertResult(
              '<b><embed src="http://www.youtube.com/v/RVtEQxH7PWA&amp;hl=en" type="application/x-shockwave-flash" width="24" height="23" allowscriptaccess="never" allownetworking="internal" wmode="window" /></b>'
          );
      }
  
  }
  
  // vim: et sw=4 sts=4