All problematic characters will be escaped
This commit is contained in:
parent
dee562437b
commit
ef8174af70
1 changed files with 3 additions and 3 deletions
|
@ -33,7 +33,7 @@ class TestTranslate:
|
|||
data_translated = _(data)
|
||||
assert 'Szia' in data_translated
|
||||
assert '<' not in data_translated
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
|
||||
# Escaping dicts
|
||||
user = {"username": "Hacker<script>alert('boom')</script>"}
|
||||
|
@ -41,7 +41,7 @@ class TestTranslate:
|
|||
data_translated = _(data)
|
||||
assert 'Szia' in data_translated
|
||||
assert '<' not in data_translated
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
|
||||
# Escaping lists
|
||||
users = [{"username": "Hacker<script>alert('boom')</script>"}]
|
||||
|
@ -49,4 +49,4 @@ class TestTranslate:
|
|||
data_translated = _(data)
|
||||
assert 'Szia' in data_translated
|
||||
assert '<' not in data_translated
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
assert data_translated == "Szia Hacker<script>alert('boom')</script>!"
|
||||
|
|
Loading…
Reference in a new issue