dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #797 from mcemeren/master

Browse Source 
Fixed issue;sanitizer closing no close tags
This commit is contained in:
mdipierro
2015-02-20 08:37:35 -06:00
parent 4e019fe6fd 0760752719
commit defe76d947
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gluon/sanitizer.py
+1 -1
View File
@@ -125,7 +125,7 @@ class XssCleaner(HTMLParser):
bt += ' /' bt += ' /'
bt += '>' bt += '>'
self.result += bt self.result += bt
self.open_tags.insert(0, tag) if tag not in self.requires_no_close: self.open_tags.insert(0, tag)
def handle_endtag(self, tag): def handle_endtag(self, tag):
bracketed = '</%s>' % tag bracketed = '</%s>' % tag
gluon/tests/test_html.py
+3
View File
@@ -308,6 +308,9 @@ class TestBareHelpers(unittest.TestCase):
# beware that the comparison is made on the XML repr # beware that the comparison is made on the XML repr
self.assertEqual(XML('<h1>Hello<a data-hello="world">World</a></h1>', sanitize=True), self.assertEqual(XML('<h1>Hello<a data-hello="world">World</a></h1>', sanitize=True),
XML('<h1>HelloWorld</h1>')) XML('<h1>HelloWorld</h1>'))
#bug check for the sanitizer for closing no-close tags
self.assertEqual(XML('<p>Test</p><br/><p>Test</p><br/>', sanitize=True),
XML('<p>Test</p><br /><p>Test</p><br />'))
def testTAG(self): def testTAG(self):
self.assertEqual(TAG.first(TAG.second('test'), _key=3).xml(), self.assertEqual(TAG.first(TAG.second('test'), _key=3).xml(),