discourse/spec/components/category_badge_spec.rb

18 lines
496 B
Ruby
Raw Normal View History

# frozen_string_literal: true
require 'rails_helper'
require 'category_badge'
describe CategoryBadge do
it "escapes HTML in category names / descriptions" do
c = Fabricate(:category, name: '<b>name</b>', description: '<b>title</b>')
html = CategoryBadge.html_for(c)
expect(html).not_to include("<b>title</b>")
expect(html).not_to include("<b>name</b>")
expect(html).to include(ERB::Util.html_escape("<b>name</b>"))
expect(html).to include("title='title'")
end
end