diff --git a/test/unit/tiny_mce_article_test.rb b/test/unit/tiny_mce_article_test.rb index 6a44928..0b066fa 100644 --- a/test/unit/tiny_mce_article_test.rb +++ b/test/unit/tiny_mce_article_test.rb @@ -118,6 +118,11 @@ class TinyMceArticleTest < Test::Unit::TestCase assert_no_match /script/, article.name end + should 'not allow XSS on abstract' do + article = TinyMceArticle.create!(:name => "test 123", :abstract => 'abstract with ', :profile => profile) + assert_no_match /script/, article.abstract + end + should 'notifiable be true' do a = fast_create(TinyMceArticle) assert a.notifiable? -- libgit2 0.21.2