Update JavaScriptUtils

Add escaping for <, >, and PS/LS line terminators

Issue: SPR-9983
This commit is contained in:
Rossen Stoyanchev
2013-02-15 06:37:04 -05:00
parent 6e5cb7fbcd
commit f5c9fe69a4
2 changed files with 81 additions and 0 deletions

View File

@@ -0,0 +1,67 @@
/*
* Copyright 2004-2013 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.springframework.web.util;
import static org.junit.Assert.*;
import java.io.UnsupportedEncodingException;
import org.junit.Test;
/**
* Test fixture for {@link JavaScriptUtils}.
*
* @author Rossen Stoyanchev
*/
public class JavaScriptUtilsTests {
@Test
public void escape() {
StringBuilder sb = new StringBuilder();
sb.append('"');
sb.append("'");
sb.append("\\");
sb.append("/");
sb.append("\t");
sb.append("\n");
sb.append("\r");
sb.append("\f");
sb.append("\b");
sb.append("\013");
assertEquals("\\\"\\'\\\\\\/\\t\\n\\n\\f\\b\\v", JavaScriptUtils.javaScriptEscape(sb.toString()));
}
// SPR-9983
@Test
public void escapePsLsLineTerminators() {
StringBuilder sb = new StringBuilder();
sb.append('\u2028');
sb.append('\u2029');
String result = JavaScriptUtils.javaScriptEscape(sb.toString());
assertEquals("\\u2028\\u2029", result);
}
// SPR-9983
@Test
public void escapeLessThanGreaterThanSigns() throws UnsupportedEncodingException {
assertEquals("\\u003C\\u003E", JavaScriptUtils.javaScriptEscape("<>"));
}
}