14 lines
521 B
Python
14 lines
521 B
Python
|
from .fixtures import *
|
||
|
|
|
||
|
|
def test_title_is_htmlencoded_in_index_html(tmp_path, process):
|
||
|
|
"""
|
||
|
|
https://github.com/pirate/ArchiveBox/issues/330
|
||
|
|
Unencoded content should not be rendered as it facilitates xss injections
|
||
|
|
and breaks the layout.
|
||
|
|
"""
|
||
|
|
add_process = subprocess.run(['archivebox', 'add', 'http://localhost:8080/static/title_with_html.com.html'], capture_output=True)
|
||
|
|
|
||
|
|
with open(tmp_path / "index.html", "r") as f:
|
||
|
|
output_html = f.read()
|
||
|
|
|
||
|
|
assert "<textarea>" not in output_html
|