diff options
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/lib/template.php | 71 |
1 files changed, 71 insertions, 0 deletions
diff --git a/tests/lib/template.php b/tests/lib/template.php new file mode 100644 index 00000000000..d6d5a122f42 --- /dev/null +++ b/tests/lib/template.php @@ -0,0 +1,71 @@ +<?php +/** +* ownCloud +* +* @author Bernhard Posselt +* @copyright 2012 Bernhard Posselt nukeawhale@gmail.com +* +* This library is free software; you can redistribute it and/or +* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE +* License as published by the Free Software Foundation; either +* version 3 of the License, or any later version. +* +* This library is distributed in the hope that it will be useful, +* but WITHOUT ANY WARRANTY; without even the implied warranty of +* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +* GNU AFFERO GENERAL PUBLIC LICENSE for more details. +* +* You should have received a copy of the GNU Affero General Public +* License along with this library. If not, see <http://www.gnu.org/licenses/>. +* +*/ + +require_once("../lib/template.php"); + +class Test_TemplateFunctions extends UnitTestCase { + + public function testP(){ + // FIXME: do we need more testcases? + $htmlString = "<script>alert('xss');</script>"; + ob_start(); + p($htmlString); + $result = ob_get_clean(); + ob_end_clean(); + + $this->assertEqual("<script>alert('xss');</script>", $result); + } + + public function testPNormalString(){ + $normalString = "This is a good string!"; + ob_start(); + p($normalString); + $result = ob_get_clean(); + ob_end_clean(); + + $this->assertEqual("This is a good string!", $result); + } + + + public function testPrintUnescaped(){ + $htmlString = "<script>alert('xss');</script>"; + + ob_start(); + print_unescaped($htmlString); + $result = ob_get_clean(); + ob_end_clean(); + + $this->assertEqual($htmlString, $result); + } + + public function testPrintUnescapedNormalString(){ + $normalString = "This is a good string!"; + ob_start(); + print_unescaped($normalString); + $result = ob_get_clean(); + ob_end_clean(); + + $this->assertEqual("This is a good string!", $result); + } + + +} |