What does ๐ mean in text?")).toBe(
- "<div>What does ๐ mean in text?",
- );
+ expect(escapeHTML("What does ๐ mean in text?")).toBe("<div>What does ๐ mean in text?");
- expect(
- escapeHTML(
- ("lalala" + "" + "lalala").repeat(900),
- ),
- ).toBe("lalala<script>alert(1)</script>lalala".repeat(900));
- expect(
- escapeHTML(("" + "lalala").repeat(900)),
- ).toBe("<script>alert(1)</script>lalala".repeat(900));
- expect(
- escapeHTML(("lalala" + "").repeat(900)),
- ).toBe(("lalala" + "<script>alert(1)</script>").repeat(900));
+ expect(escapeHTML(("lalala" + "" + "lalala").repeat(900))).toBe(
+ "lalala<script>alert(1)</script>lalala".repeat(900),
+ );
+ expect(escapeHTML(("" + "lalala").repeat(900))).toBe(
+ "<script>alert(1)</script>lalala".repeat(900),
+ );
+ expect(escapeHTML(("lalala" + "").repeat(900))).toBe(
+ ("lalala" + "<script>alert(1)</script>").repeat(900),
+ );
// the positions of the unicode codepoint are important
// our simd code for U16 is at 8 bytes, so we need to especially check the boundaries
- expect(
- escapeHTML("๐lalala" + "" + "lalala"),
- ).toBe("๐lalala<script>alert(1)</script>lalala");
- expect(escapeHTML("" + "lalala")).toBe(
- "<script>๐alert(1)</script>lalala",
- );
- expect(escapeHTML("" + "lalala")).toBe(
- "<script>alert(1)๐</script>lalala",
- );
- expect(escapeHTML("" + "๐lalala")).toBe(
- "<script>alert(1)</script>๐lalala",
+ expect(escapeHTML("๐lalala" + "" + "lalala")).toBe(
+ "๐lalala<script>alert(1)</script>lalala",
);
- expect(escapeHTML("" + "lal๐ala")).toBe(
- "<script>alert(1)</script>lal๐ala",
+ expect(escapeHTML("" + "lalala")).toBe("<script>๐alert(1)</script>lalala");
+ expect(escapeHTML("" + "lalala")).toBe("<script>alert(1)๐</script>lalala");
+ expect(escapeHTML("" + "๐lalala")).toBe("<script>alert(1)</script>๐lalala");
+ expect(escapeHTML("" + "lal๐ala")).toBe("<script>alert(1)</script>lal๐ala");
+ expect(escapeHTML("" + "lal๐ala".repeat(10))).toBe(
+ "<script>alert(1)</script>" + "lal๐ala".repeat(10),
);
- expect(
- escapeHTML("" + "lal๐ala".repeat(10)),
- ).toBe("<script>alert(1)</script>" + "lal๐ala".repeat(10));
for (let i = 1; i < 10; i++)
expect(escapeHTML("" + "la๐".repeat(i))).toBe(
"<script>alert(1)</script>" + "la๐".repeat(i),
);
- expect(escapeHTML("la๐" + "")).toBe(
- "la๐" + "<script>alert(1)</script>",
+ expect(escapeHTML("la๐" + "")).toBe("la๐" + "<script>alert(1)</script>");
+ expect(escapeHTML(("lalala" + "๐").repeat(1))).toBe(
+ ("lalala" + "<script>alert(1)</script>๐").repeat(1),
);
- expect(
- escapeHTML(("lalala" + "๐").repeat(1)),
- ).toBe(("lalala" + "<script>alert(1)</script>๐").repeat(1));
expect(escapeHTML("๐".repeat(100))).toBe("๐".repeat(100));
expect(escapeHTML("๐<".repeat(100))).toBe("๐<".repeat(100));
--
cgit v1.2.3