Merge pull request #2 from pointfreeco/escaping-verification

Pin swift-snapshot-testing, and added a test
pointfreeco · Sep 13, 2018 · bb2fac7 · bb2fac7
2 parents 6d614a8 + eec68b0
commit bb2fac7
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/Package.swift b/Package.swift
@@ -10,7 +10,7 @@ let package = Package(
       targets: ["Html"]),
   ],
   dependencies: [
-    .package(url: "https://github.com/pointfreeco/swift-snapshot-testing.git", .revision("69b48c8")),
+    .package(url: "https://github.com/pointfreeco/swift-snapshot-testing.git", from: "0.0.1")
   ],
   targets: [
     .target(

diff --git a/Tests/HtmlTests/AttributesTests.swift b/Tests/HtmlTests/AttributesTests.swift
@@ -14,6 +14,11 @@ final class AttributesTests: XCTestCase {
     XCTAssertEqual("<th scope=\"row\"/>", render(th([scope(.row)], [])))
     XCTAssertEqual("<th scope=\"rowgroup\"/>", render(th([scope(.rowgroup)], [])))
 
+    XCTAssertEqual(
+      "<a href=\"/user/foo&quot; onmouseover=&quot;alert(1)\">XSS</a>",
+      render(a([href("/user/foo\" onmouseover=\"alert(1)")], ["XSS"]))
+    )
+
     XCTAssertEqual("<a accesskey=\"a\"/>", render(a([accesskey("a")], [])))
 
     XCTAssertEqual(