Merge pull request #44288 from jonathanhefner/fix-test_tag_attributes_escapes_values-assertion
Fix test_tag_attributes_escapes_values assertion
This commit is contained in:
commit
de956f5773
|
@ -404,7 +404,11 @@ class TagHelperTest < ActionView::TestCase
|
||||||
end
|
end
|
||||||
|
|
||||||
def test_tag_attributes_escapes_values
|
def test_tag_attributes_escapes_values
|
||||||
assert_not_includes "<script>alert()</script>", render_erb(<<~HTML.strip)
|
expected_output = <<~HTML.strip
|
||||||
|
<input type="text" xss=""><script>alert()</script>">
|
||||||
|
HTML
|
||||||
|
|
||||||
|
assert_equal expected_output, render_erb(<<~HTML.strip)
|
||||||
<input type="text" <%= tag.attributes xss: '"><script>alert()</script>' %>>
|
<input type="text" <%= tag.attributes xss: '"><script>alert()</script>' %>>
|
||||||
HTML
|
HTML
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in New Issue