package sanitize
import (
"strings"
"testing"
)
const page = `
Hi
Title
js link
real link
styled
`
func TestStripRemovesAllJS(t *testing.T) {
out, rep, err := Strip([]byte(page), Options{Banner: "cloned by kage"})
if err != nil {
t.Fatal(err)
}
s := string(out)
if strings.Contains(s, " survived")
}
if strings.Contains(s, "onload") || strings.Contains(s, "onclick") || strings.Contains(s, "onerror") {
t.Error("an on* handler survived")
}
if strings.Contains(strings.ToLower(s), "javascript:") {
t.Error("a javascript: URL survived")
}
if strings.Contains(s, "modulepreload") || strings.Contains(s, "preconnect") {
t.Error("a dead resource hint survived")
}
if strings.Contains(s, "http-equiv") {
t.Error("a meta refresh survived")
}
// Layout-bearing markup must survive untouched.
for _, want := range []string{
`rel="stylesheet"`, `href="/css/main.css"`,
`