From b4b222c1d792b554cf5024cd040a2322bb6f45f9 Mon Sep 17 00:00:00 2001
From: Taras Machyshyn <taras@espocrm.com>
Date: Mon, 12 Aug 2019 15:23:29 +0300
Subject: [PATCH] Unit tests for sanitizeHtml()

---
 tests/unit/Espo/Core/Utils/UtilTest.php | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/tests/unit/Espo/Core/Utils/UtilTest.php b/tests/unit/Espo/Core/Utils/UtilTest.php
index cda1043887..7ed350765b 100644
--- a/tests/unit/Espo/Core/Utils/UtilTest.php
+++ b/tests/unit/Espo/Core/Utils/UtilTest.php
@@ -1582,5 +1582,24 @@ class UtilTest extends \PHPUnit\Framework\TestCase
 
         $this->assertEquals($result, \Espo\Core\Utils\Util::arrayDiff($array1, $array2));
     }
-}
 
+    public function htmlList()
+    {
+        return [
+            ['Test<script>alert("test")</script>', 'Test&lt;script&gt;alert(&quot;test&quot;)&lt;/script&gt;'],
+            ['<p>Test</p>', '<p>Test</p>'],
+            ['<p><b>Test</b></p>', '<p><b>Test</b></p>'],
+            ['<pre>Test</pre>', '<pre>Test</pre>'],
+            ['<p><b>Test</b> <a href="#">test link</a></p>', '<p><b>Test</b> &lt;a href=&quot;#&quot;&gt;test link&lt;/a&gt;</p>'],
+            ['<strong>Test</strong>', '<strong>Test</strong>'],
+        ];
+    }
+
+    /**
+     * @dataProvider htmlList
+     */
+    public function testSanitizeHtml($html, $expectedResult)
+    {
+        $this->assertEquals($expectedResult, Util::sanitizeHtml($html));
+    }
+}