func TestRenderLinkDefaultDangerous(t *testing.T) {
t.Parallel()
- /*
- Content: <p>Link: <a href="javascript:alert(1)">Click me</a>
- AutoLink: <a href="">javascript:alert(1)</a>
- Image: <img src="javascript:alert(1)" alt="alt"></p>
- */
-
files := `
-- content/p1.md --
---
title: "p1"
---
Link: [Click me](javascript:alert(1))
-AutoLink: <javascript:alert(2)>
-Image: )
+Image: )
-- layouts/all.html --
Content: {{ .Content }}
`
b.AssertFileContent("public/p1/index.html",
`! alert(1)"`,
- `! href="javascript:alert(2)"`,
- `! alert(3)"`,
+ `! alert(2)"`,
)
}