Changeset 32860 for trunk/tests/phpunit/tests/kses.php

Timestamp:

06/19/2015 06:46:11 PM (9 years ago)

Author:

wonderboymusic

Message:

Don't strip \0 (backslash+zero) from post content for users without "unfiltered_html"

Adds unit tests.

Props miqrogroove.
Fixes #28699.

File:

• trunk/tests/phpunit/tests/kses.php (modified) (1 diff)

trunk/tests/phpunit/tests/kses.php

@@ -412 +412 @@
         );
     }
+    
+    /**
+     * Test removal of '\0' strings.
+     *
+     * @ticket 28699
+     * @dataProvider data_slash_zero_removal
+     */
+    function test_slash_zero_removal( $input, $output ) {
+        global $allowedposttags;
+
+        return $this->assertEquals( $output, wp_kses( $input, $allowedposttags ) );
+    }
+    
+    function data_slash_zero_removal() {
+        return array(
+            array(
+                'This \\0 should be no big deal.',
+                'This \\0 should be no big deal.',
+            ),
+            array(
+                '<div>This \\0 should be no big deal.</div>',
+                '<div>This \\0 should be no big deal.</div>',
+            ),
+            array(
+                '<div align="\\0left">This should be no big deal.</div>',
+                '<div align="\\0left">This should be no big deal.</div>',
+            ),
+            array(
+                'This <div style="float:\\0left"> is more of a concern.',
+                'This <div style="float:left"> is more of a concern.',
+            ),
+            array(
+                'This <div style="float:\\0\\0left"> is more of a concern.',
+                'This <div style="float:left"> is more of a concern.',
+            ),
+            array(
+                'This <div style="float:\\\\00left"> is more of a concern.',
+                'This <div style="float:left"> is more of a concern.',
+            ),
+            array(
+                'This <div style="float:\\\\\\\\0000left"> is more of a concern.',
+                'This <div style="float:left"> is more of a concern.',
+            ),
+            array(
+                'This <div style="float:\\0000left"> is more of a concern.',
+                'This <div style="float:left"> is more of a concern.',
+            ),
+            array(
+                '<style type="text/css">div {background-image:\\0}</style>',
+                'div {background-image:\\0}',
+            ),
+        );
+    }
 }