"""
"""
import os, sys
if __name__ == '__main__':
execfile(os.path.join(sys.path[0], 'framework.py'))
from Testing import ZopeTestCase
from Products.Archetypes.tests.atsitetestcase import ATSiteTestCase
class TestXSSFilter(ATSiteTestCase):
def afterSetUp(self):
ATSiteTestCase.afterSetUp(self)
self.engine = self.portal.portal_transforms
def doTest(self, data_in, data_out):
html = self.engine.convertTo('text/x-html-safe', data_in, mimetype="text/html")
assert(html.getData())
self.assertEqual (data_out,html.getData())
def test_1(self):
data_in = """;)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_2(self):
data_in = """"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_3(self):
data_in = """)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_4(self):
data_in = """"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_5(self):
data_in = """;)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_6(self):
data_in = """;)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_7(self):
data_in = """test med a-tag"""
data_out = """test med a-tag"""
self.doTest(data_in, data_out)
def test_8(self):
data_in = """test
"""
data_out = """test
"""
self.doTest(data_in, data_out)
def test_9(self):
data_in = """test
"""
data_out = """test
"""
self.doTest(data_in, data_out)
def test_10(self):
data_in = """test
"""
data_out = """test
"""
self.doTest(data_in, data_out)
def test_11(self):
data_in = """test
"""
data_out = """test
"""
self.doTest(data_in, data_out)
def test_12(self):
data_in = """)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_13(self):
data_in = """)
"""
data_out = """![]()
"""
self.doTest(data_in, data_out)
def test_14(self):
data_in = """test"""
data_out = """test"""
self.doTest(data_in, data_out)
def test_15(self):
data_in = """div
"""
data_out = """div
"""
self.doTest(data_in, data_out)
def test_16(self):
data_in = """div
"""
data_out = """div
"""
self.doTest(data_in, data_out)
def test_17(self):
data_in = """div
"""
data_out = """div
"""
self.doTest(data_in, data_out)
def test_18(self):
data_in = """div
"""
data_out = data_in
self.doTest(data_in, data_out)
def test_19(self):
data_in = """headnet"""
data_out = data_in
self.doTest(data_in, data_out)
def test_20(self):
data_in = """
"""
data_out = data_in
self.doTest(data_in, data_out)
def test_21(self):
data_in = """bla bla bla"""
data_out = """bla bla bla"""
self.doTest(data_in, data_out)
def test_22(self):
data_in = '<script>alert("XSS");</script>'
data_out = '<script>alert("XSS");</script>'
self.doTest(data_in, data_out)
def test_suite():
from unittest import TestSuite, makeSuite
suite = TestSuite()
suite.addTest(makeSuite(TestXSSFilter))
return suite
if __name__ == '__main__':
framework()