mirrors/ArchiveBox
1
0
Fork 0
mirror of https://github.com/ArchiveBox/ArchiveBox.git synced 2025-05-14 23:24:30 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: htmlencode titles before rendering the static html index and detail

Browse source
This commit is contained in:
Cristian 2020-07-16 09:20:33 -05:00
parent 175e6fa3d0
commit f845224d6f
3 changed files with 715 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tests/test_title.py Normal file
View file

@ -0,0 +1,14 @@
from .fixtures import *
def test_title_is_htmlencoded_in_index_html(tmp_path, process):
"""
https://github.com/pirate/ArchiveBox/issues/330
Unencoded content should not be rendered as it facilitates xss injections
and breaks the layout.
"""
add_process = subprocess.run(['archivebox', 'add', 'http://localhost:8080/static/title_with_html.com.html'], capture_output=True)
with open(tmp_path / "index.html", "r") as f:
output_html = f.read()
assert "<textarea>" not in output_html