Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1932)

Unified Diff: test/codegen/lib/html/trusted_html_tree_sanitizer_test.dart

Issue 1930043002: Add all dart:html tests from the sdk to test/codegen. (Closed) Base URL: git@github.com:dart-lang/dev_compiler.git@master
Patch Set: ptal Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « test/codegen/lib/html/transition_event_test.dart ('k') | test/codegen/lib/html/two_scripts_htmltest.html » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: test/codegen/lib/html/trusted_html_tree_sanitizer_test.dart
diff --git a/test/codegen/lib/html/trusted_html_tree_sanitizer_test.dart b/test/codegen/lib/html/trusted_html_tree_sanitizer_test.dart
new file mode 100644
index 0000000000000000000000000000000000000000..c03e39d4074b0463758069e809ff8f3799bc3fcd
--- /dev/null
+++ b/test/codegen/lib/html/trusted_html_tree_sanitizer_test.dart
@@ -0,0 +1,64 @@
+// Copyright (c) 2013, the Dart project authors. Please see the AUTHORS file
+// for details. All rights reserved. Use of this source code is governed by a
+// BSD-style license that can be found in the LICENSE file.
+
+/// This tests HTML validation and sanitization, which is very important
+/// for prevent XSS or other attacks. If you suppress this, or parts of it
+/// please make it a critical bug and bring it to the attention of the
+/// dart:html maintainers.
+library trusted_html_tree_sanitizer_test;
+
+import 'dart:html';
+import 'dart:svg' as svg;
+import 'package:unittest/unittest.dart';
+import 'package:unittest/html_individual_config.dart';
+import 'utils.dart';
+import 'dart:js' as js;
+
+var oldAdoptNode;
+var jsDocument;
+
+/// We want to verify that with the trusted sanitizer we are not
+/// creating a document fragment. So make DocumentFragment operation
+/// throw.
+makeDocumentFragmentAdoptionThrow() {
+ var document = js.context['document'];
+ jsDocument = new js.JsObject.fromBrowserObject(document);
+ oldAdoptNode = jsDocument['adoptNode'];
+ jsDocument['adoptNode'] = null;
+}
+
+restoreOldAdoptNode() {
+ jsDocument['adoptNode'] = oldAdoptNode;
+}
+
+main() {
+ useHtmlIndividualConfiguration();
+
+ group('not_create_document_fragment', () {
+ setUp(makeDocumentFragmentAdoptionThrow);
+ tearDown(restoreOldAdoptNode);
+
+ test('setInnerHtml', () {
+ document.body.setInnerHtml('<div foo="baz">something</div>',
+ treeSanitizer: NodeTreeSanitizer.trusted);
+ expect(document.body.innerHtml, '<div foo="baz">something</div>');
+ });
+
+ test("appendHtml", () {
+ var oldStuff = document.body.innerHtml;
+ var newStuff = '<div rumplestiltskin="value">content</div>';
+ document.body.appendHtml(newStuff,
+ treeSanitizer: NodeTreeSanitizer.trusted);
+ expect(document.body.innerHtml, oldStuff + newStuff);
+ });
+ });
+
+ group('untrusted', () {
+ setUp(makeDocumentFragmentAdoptionThrow);
+ tearDown(restoreOldAdoptNode);
+ test('untrusted', () {
+ expect(() => document.body.innerHtml = "<p>anything</p>", throws);
+ });
+ });
+}
« no previous file with comments | « test/codegen/lib/html/transition_event_test.dart ('k') | test/codegen/lib/html/two_scripts_htmltest.html » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698