Update JavaScriptUtils
Add escaping for <, >, and PS/LS line terminators Issue: SPR-9983
This commit is contained in:
@@ -0,0 +1,67 @@
|
||||
/*
|
||||
* Copyright 2004-2013 the original author or authors.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
package org.springframework.web.util;
|
||||
|
||||
import static org.junit.Assert.*;
|
||||
|
||||
import java.io.UnsupportedEncodingException;
|
||||
|
||||
import org.junit.Test;
|
||||
|
||||
/**
|
||||
* Test fixture for {@link JavaScriptUtils}.
|
||||
*
|
||||
* @author Rossen Stoyanchev
|
||||
*/
|
||||
public class JavaScriptUtilsTests {
|
||||
|
||||
@Test
|
||||
public void escape() {
|
||||
StringBuilder sb = new StringBuilder();
|
||||
sb.append('"');
|
||||
sb.append("'");
|
||||
sb.append("\\");
|
||||
sb.append("/");
|
||||
sb.append("\t");
|
||||
sb.append("\n");
|
||||
sb.append("\r");
|
||||
sb.append("\f");
|
||||
sb.append("\b");
|
||||
sb.append("\013");
|
||||
assertEquals("\\\"\\'\\\\\\/\\t\\n\\n\\f\\b\\v", JavaScriptUtils.javaScriptEscape(sb.toString()));
|
||||
}
|
||||
|
||||
// SPR-9983
|
||||
|
||||
@Test
|
||||
public void escapePsLsLineTerminators() {
|
||||
StringBuilder sb = new StringBuilder();
|
||||
sb.append('\u2028');
|
||||
sb.append('\u2029');
|
||||
String result = JavaScriptUtils.javaScriptEscape(sb.toString());
|
||||
|
||||
assertEquals("\\u2028\\u2029", result);
|
||||
}
|
||||
|
||||
// SPR-9983
|
||||
|
||||
@Test
|
||||
public void escapeLessThanGreaterThanSigns() throws UnsupportedEncodingException {
|
||||
assertEquals("\\u003C\\u003E", JavaScriptUtils.javaScriptEscape("<>"));
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user