Changeset 47837 for trunk/tests/phpunit/tests/kses.php

Timestamp:

05/21/2020 04:52:33 AM (4 years ago)

Author:

peterwilsoncc

Message:

KSES: Support the video element's playsinline attribute.

Allow users without the unfiltered_html capability to use the playsinline attribute when embedding videos.

Additionally this adds unit tests for passing the video element through kses.

Fixes #50167. See #29826.

File:

• trunk/tests/phpunit/tests/kses.php (modified) (1 diff)

trunk/tests/phpunit/tests/kses.php

@@ -62 +62 @@
             $this->assertEquals( $expect_string, wp_kses( $string, $allowedposttags ) );
         }
+    }
+
+    /**
+     * Test video tag.
+     *
+     * @ticket 50167
+     * @ticket 29826
+     * @dataProvider data_wp_kses_video
+     *
+     * @param string $source   Source HTML.
+     * @param string $context  Context to use for parsing source.
+     * @param string $expected Expected output following KSES parsing.
+     * @return void
+     */
+    function test_wp_kses_video( $source, $context, $expected ) {
+        $actual = wp_kses( $source, $context );
+        $this->assertSame( $expected, $actual );
+    }
+
+    /**
+     * Data provider for test_wp_kses_video
+     *
+     * @return array[] Array containing test data {
+     *     @type string $source   Source HTML.
+     *     @type string $context  Context to use for parsing source.
+     *     @type string $expected Expected output following KSES parsing.
+     * }
+     */
+    function data_wp_kses_video() {
+        return array(
+            // Set 0: Valid post object params in post context.
+            array(
+                '<video src="movie.mov" autoplay controls height=9 loop muted poster="still.gif" playsinline preload width=16 />',
+                'post',
+                '<video src="movie.mov" autoplay controls height="9" loop muted poster="still.gif" playsinline preload width="16" />',
+            ),
+            // Set 1: Valid post object params in data context.
+            array(
+                '<video src="movie.mov" autoplay controls height=9 loop muted poster="still.gif" playsinline preload width=16 />',
+                'data',
+                '',
+            ),
+            // Set 2: Disallowed urls in post context.
+            array(
+                '<video src="bad://w.org/movie.mov" poster="bad://w.org/movie.jpg" />',
+                'post',
+                '<video src="//w.org/movie.mov" poster="//w.org/movie.jpg" />',
+            ),
+            // Set 3: Disallowed attributes in post context.
+            array(
+                '<video onload="alert(1);" src="https://videos.files.wordpress.com/DZEMDKxc/video-0f9c363010.mp4" />',
+                'post',
+                '<video src="https://videos.files.wordpress.com/DZEMDKxc/video-0f9c363010.mp4" />',
+            ),
+        );
     }