378 lines
132 KiB
Go
378 lines
132 KiB
Go
|
// Copyright (c) 2014, David Kitchen <david@buro9.com>
|
||
|
|
//
|
||
|
|
// All rights reserved.
|
||
|
|
//
|
||
|
|
// Redistribution and use in source and binary forms, with or without
|
||
|
|
// modification, are permitted provided that the following conditions are met:
|
||
|
|
//
|
||
|
|
// * Redistributions of source code must retain the above copyright notice, this
|
||
|
|
// list of conditions and the following disclaimer.
|
||
|
|
//
|
||
|
|
// * Redistributions in binary form must reproduce the above copyright notice,
|
||
|
|
// this list of conditions and the following disclaimer in the documentation
|
||
|
|
// and/or other materials provided with the distribution.
|
||
|
|
//
|
||
|
|
// * Neither the name of the organisation (Microcosm) nor the names of its
|
||
|
|
// contributors may be used to endorse or promote products derived from
|
||
|
|
// this software without specific prior written permission.
|
||
|
|
//
|
||
|
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
||
|
|
// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||
|
|
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||
|
|
// DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
||
|
|
// FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||
|
|
// DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
||
|
|
// SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
||
|
|
// CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
||
|
|
// OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||
|
|
// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||
|
|
|
||
|
|
package bluemonday
|
||
|
|
|
||
|
|
import (
|
||
|
|
"sync"
|
||
|
|
"testing"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestRegexpVars(t *testing.T) {
|
||
|
|
// CellAlign
|
||
|
|
if !CellAlign.MatchString("CENTER") {
|
||
|
|
t.Error("CellAlign did not match: CENTER")
|
||
|
|
}
|
||
|
|
if !CellAlign.MatchString("justIFY") {
|
||
|
|
t.Error("CellAlign did not match: justIFY")
|
||
|
|
}
|
||
|
|
if !CellAlign.MatchString("left") {
|
||
|
|
t.Error("CellAlign did not match: left")
|
||
|
|
}
|
||
|
|
if !CellAlign.MatchString("right") {
|
||
|
|
t.Error("CellAlign did not match: right")
|
||
|
|
}
|
||
|
|
if !CellAlign.MatchString("char") {
|
||
|
|
t.Error("CellAlign did not match: char")
|
||
|
|
}
|
||
|
|
if CellAlign.MatchString("char char") {
|
||
|
|
t.Error("CellAlign matched: char char")
|
||
|
|
}
|
||
|
|
|
||
|
|
// CellVerticalAlign
|
||
|
|
if !CellVerticalAlign.MatchString("BASELINE") {
|
||
|
|
t.Error("CellVerticalAlign did not match: BASELINE")
|
||
|
|
}
|
||
|
|
if !CellVerticalAlign.MatchString("boTtOM") {
|
||
|
|
t.Error("CellVerticalAlign did not match: boTtOM")
|
||
|
|
}
|
||
|
|
if !CellVerticalAlign.MatchString("middle") {
|
||
|
|
t.Error("CellVerticalAlign did not match: middle")
|
||
|
|
}
|
||
|
|
if !CellVerticalAlign.MatchString("top") {
|
||
|
|
t.Error("CellVerticalAlign did not match: top")
|
||
|
|
}
|
||
|
|
if CellVerticalAlign.MatchString("top top") {
|
||
|
|
t.Error("CellVerticalAlign matched: top top")
|
||
|
|
}
|
||
|
|
|
||
|
|
// Direction
|
||
|
|
if !Direction.MatchString("RTL") {
|
||
|
|
t.Error("Direction did not match: RTL")
|
||
|
|
}
|
||
|
|
if !Direction.MatchString("ltr") {
|
||
|
|
t.Error("Direction did not match: ltr")
|
||
|
|
}
|
||
|
|
if Direction.MatchString("") {
|
||
|
|
t.Error("Direction matched: ")
|
||
|
|
}
|
||
|
|
if Direction.MatchString("rtltr") {
|
||
|
|
t.Error("Direction matched: rtltr")
|
||
|
|
}
|
||
|
|
if Direction.MatchString("rtl rtl") {
|
||
|
|
t.Error("Direction matched: rtl rtl")
|
||
|
|
}
|
||
|
|
|
||
|
|
// ImageAlign
|
||
|
|
if !ImageAlign.MatchString("LEFT") {
|
||
|
|
t.Error("CellAlign did not match: LEFT")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("right") {
|
||
|
|
t.Error("CellAlign did not match: right")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("tOP") {
|
||
|
|
t.Error("CellAlign did not match: tOP")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("texttop") {
|
||
|
|
t.Error("CellAlign did not match: texttop")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("middle") {
|
||
|
|
t.Error("CellAlign did not match: middle")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("absmiddle") {
|
||
|
|
t.Error("CellAlign did not match: absmiddle")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("baseline") {
|
||
|
|
t.Error("CellAlign did not match: baseline")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("bottom") {
|
||
|
|
t.Error("CellAlign did not match: bottom")
|
||
|
|
}
|
||
|
|
if !ImageAlign.MatchString("absbottom") {
|
||
|
|
t.Error("CellAlign did not match: absbottom")
|
||
|
|
}
|
||
|
|
if ImageAlign.MatchString("left right") {
|
||
|
|
t.Error("CellAlign matched: left right")
|
||
|
|
}
|
||
|
|
if ImageAlign.MatchString("left left") {
|
||
|
|
t.Error("CellAlign matched: left left")
|
||
|
|
}
|
||
|
|
if ImageAlign.MatchString("char") {
|
||
|
|
t.Error("CellAlign matched: char")
|
||
|
|
}
|
||
|
|
if ImageAlign.MatchString("char") {
|
||
|
|
t.Error("CellAlign matched: char")
|
||
|
|
}
|
||
|
|
|
||
|
|
// Integer
|
||
|
|
if !Integer.MatchString("123") {
|
||
|
|
t.Error("Integer did not match: 123")
|
||
|
|
}
|
||
|
|
if !Integer.MatchString("0") {
|
||
|
|
t.Error("Integer did not match: 0")
|
||
|
|
}
|
||
|
|
if Integer.MatchString("-1") {
|
||
|
|
t.Error("Integer matched: -1")
|
||
|
|
}
|
||
|
|
if Integer.MatchString("1abc") {
|
||
|
|
t.Error("Integer matched: 1abc")
|
||
|
|
}
|
||
|
|
|
||
|
|
// ISO8601
|
||
|
|
if !ISO8601.MatchString("2014") {
|
||
|
|
t.Error("ISO8601 did not match: 2014")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59-05:00") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59-05:00")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59-05:00") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59+01:00")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59:59") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59:59")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59:59-05:00") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59:59-05:00")
|
||
|
|
}
|
||
|
|
if !ISO8601.MatchString("2014-02-28T23:59:59-05:00") {
|
||
|
|
t.Error("ISO8601 did not match: 2014-02-28T23:59:59+01:00")
|
||
|
|
}
|
||
|
|
if ISO8601.MatchString("201-") {
|
||
|
|
t.Error("ISO8601 matched: 201-")
|
||
|
|
}
|
||
|
|
if ISO8601.MatchString("2014-0") {
|
||
|
|
t.Error("ISO8601 matched: 2014-0")
|
||
|
|
}
|
||
|
|
if ISO8601.MatchString("2014-02-28-") {
|
||
|
|
t.Error("ISO8601 matched: 2014-02-28-")
|
||
|
|
}
|
||
|
|
if ISO8601.MatchString("20-02-28T23:59-05:00") {
|
||
|
|
t.Error("ISO8601 matched: 20-02-28T23:59+01:00")
|
||
|
|
}
|
||
|
|
if ISO8601.MatchString(" 2014-02-28T23:59:59") {
|
||
|
|
t.Error("ISO8601 matched: 2014-02-28T23:59:59")
|
||
|
|
}
|
||
|
|
|
||
|
|
// ListType
|
||
|
|
if !ListType.MatchString("CIRCLE") {
|
||
|
|
t.Error("ListType did not match: CIRCLE")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("disc") {
|
||
|
|
t.Error("ListType did not match: disc")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("square") {
|
||
|
|
t.Error("ListType did not match: square")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("a") {
|
||
|
|
t.Error("ListType did not match: a")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("A") {
|
||
|
|
t.Error("ListType did not match: A")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("i") {
|
||
|
|
t.Error("ListType did not match: i")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("I") {
|
||
|
|
t.Error("ListType did not match: I")
|
||
|
|
}
|
||
|
|
if !ListType.MatchString("1") {
|
||
|
|
t.Error("ListType did not match: 1")
|
||
|
|
}
|
||
|
|
if ListType.MatchString("circle circle") {
|
||
|
|
t.Error("ListType matched: circle circle")
|
||
|
|
}
|
||
|
|
if ListType.MatchString("aa") {
|
||
|
|
t.Error("ListType matched: aa")
|
||
|
|
}
|
||
|
|
|
||
|
|
// SpaceSeparatedTokens
|
||
|
|
if !SpaceSeparatedTokens.MatchString("nofollow") {
|
||
|
|
t.Error("SpaceSeparatedTokens did not match: nofollow")
|
||
|
|
}
|
||
|
|
if !SpaceSeparatedTokens.MatchString("nofollow person") {
|
||
|
|
t.Error("SpaceSeparatedTokens did not match: nofollow person")
|
||
|
|
}
|
||
|
|
if !SpaceSeparatedTokens.MatchString("header") {
|
||
|
|
t.Error("SpaceSeparatedTokens did not match: header")
|
||
|
|
}
|
||
|
|
if !SpaceSeparatedTokens.MatchString("bläh") {
|
||
|
|
t.Error("SpaceSeparatedTokens did not match: bläh")
|
||
|
|
}
|
||
|
|
if !SpaceSeparatedTokens.MatchString("blah bläh") {
|
||
|
|
t.Error("SpaceSeparatedTokens did not match: blah bläh")
|
||
|
|
}
|
||
|
|
if SpaceSeparatedTokens.MatchString("bläh blah ☃") {
|
||
|
|
t.Error("SpaceSeparatedTokens matched: bläh blah ☃")
|
||
|
|
}
|
||
|
|
if SpaceSeparatedTokens.MatchString("header javascript:alert(1)") {
|
||
|
|
t.Error("SpaceSeparatedTokens matched: header javascript:alert(1)")
|
||
|
|
}
|
||
|
|
if SpaceSeparatedTokens.MatchString("header >") {
|
||
|
|
t.Error("SpaceSeparatedTokens matched: header >")
|
||
|
|
}
|
||
|
|
|
||
|
|
// Number
|
||
|
|
if !Number.MatchString("0") {
|
||
|
|
t.Error("Number did not match: 0")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("1") {
|
||
|
|
t.Error("Number did not match: 1")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("+1") {
|
||
|
|
t.Error("Number did not match: +1")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("-1") {
|
||
|
|
t.Error("Number did not match: -1")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("1.1") {
|
||
|
|
t.Error("Number did not match: 1.1")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("1.2e3") {
|
||
|
|
t.Error("Number did not match: 1.2e3")
|
||
|
|
}
|
||
|
|
if !Number.MatchString("7E-10") {
|
||
|
|
t.Error("Number did not match: 7E-10")
|
||
|
|
}
|
||
|
|
if Number.MatchString("e7.13") {
|
||
|
|
t.Error("Number matched: e7.13")
|
||
|
|
}
|
||
|
|
if Number.MatchString(`7E`) {
|
||
|
|
t.Error(`Number matched: 7E`)
|
||
|
|
}
|
||
|
|
|
||
|
|
// NumberOrPercent
|
||
|
|
if !NumberOrPercent.MatchString("0") {
|
||
|
|
t.Error("NumberOrPercent did not match: 0")
|
||
|
|
}
|
||
|
|
if !NumberOrPercent.MatchString("1") {
|
||
|
|
t.Error("NumberOrPercent did not match: 1")
|
||
|
|
}
|
||
|
|
if !NumberOrPercent.MatchString(`1%`) {
|
||
|
|
t.Error(`NumberOrPercent did not match: 1(percent)`)
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString("-1") {
|
||
|
|
t.Error("NumberOrPercent matched: -1")
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString("1.1") {
|
||
|
|
t.Error("NumberOrPercent matched: 1.1")
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString("1.2e3") {
|
||
|
|
t.Error("NumberOrPercent matched: 1.2e3")
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString("7E-10") {
|
||
|
|
t.Error("NumberOrPercent matched: 7E-10")
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString("e7.13") {
|
||
|
|
t.Error("NumberOrPercent matched: e7.13")
|
||
|
|
}
|
||
|
|
if NumberOrPercent.MatchString(`7E`) {
|
||
|
|
t.Error(`NumberOrPercent matched: 7E`)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Paragraph
|
||
|
|
if !Paragraph.MatchString("hello world") {
|
||
|
|
t.Error("Paragraph did not match: hello world")
|
||
|
|
}
|
||
|
|
if !Paragraph.MatchString("blah bläh blah") {
|
||
|
|
t.Error("Paragraph did not match: blah bläh blah")
|
||
|
|
}
|
||
|
|
if Paragraph.MatchString("bläh blah ☃") {
|
||
|
|
t.Error("Paragraph matched: bläh blah ☃")
|
||
|
|
}
|
||
|
|
if Paragraph.MatchString("javascript:alert(1)") {
|
||
|
|
t.Error("Paragraph matched: javascript:alert(1)")
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func TestAllowDataURIImages(t *testing.T) {
|
||
|
|
|
||
|
|
p := NewPolicy()
|
||
|
|
p.AllowDataURIImages()
|
||
|
|
p.AllowImages()
|
||
|
|
|
||
|
|
tests := []test{
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12P4//8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg==">`,
|
||
|
|
expected: `<img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12P4//8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg==">`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/jpeg;base64,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
|
||
|
|
expected: `<img src="data:image/jpeg;base64,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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7">`,
|
||
|
|
expected: `<img src="data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7">`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/webp;base64,UklGRh4AAABXRUJQVlA4TBEAAAAvAAAAAAfQ//73v/+BiOh/AAA=">`,
|
||
|
|
expected: `<img src="data:image/webp;base64,UklGRh4AAABXRUJQVlA4TBEAAAAvAAAAAAfQ//73v/+BiOh/AAA=">`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:text/javascript;charset=utf-8,alert('hi');">`,
|
||
|
|
expected: ``,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/png;base64,charset=utf-8,alert('hi');">`,
|
||
|
|
expected: ``,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
in: `<img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12P4-_8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg==">`,
|
||
|
|
expected: ``,
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
wg := sync.WaitGroup{}
|
||
|
|
wg.Add(len(tests))
|
||
|
|
for ii, tt := range tests {
|
||
|
|
go func(ii int, tt test) {
|
||
|
|
out := p.Sanitize(tt.in)
|
||
|
|
if out != tt.expected {
|
||
|
|
t.Errorf(
|
||
|
|
"test %d failed;\ninput : %s\noutput : %s\nexpected: %s",
|
||
|
|
ii,
|
||
|
|
tt.in,
|
||
|
|
out,
|
||
|
|
tt.expected,
|
||
|
|
)
|
||
|
|
}
|
||
|
|
wg.Done()
|
||
|
|
}(ii, tt)
|
||
|
|
}
|
||
|
|
wg.Wait()
|
||
|
|
}
|