fixup! squash! Fix #72: rewrite the sanitizer to be a treewalker filter only.

gsnedders · gsnedders · commit d4abff1d94b8 · 2016-05-08T20:02:09.000+01:00
diff --git a/html5lib/tests/test_sanitizer.py b/html5lib/tests/test_sanitizer.py
@@ -39,8 +39,28 @@ def test_should_allow_relative_uris():
     assert expected == sanitized
 
 
+def test_invalid_data_uri():
+    sanitized = sanitize_html('<audio controls="" src="data:foobar"></audio>')
+    expected = '<audio controls></audio>'
+    assert expected == sanitized
+
+
+def test_invalid_ipv6_url():
+    sanitized = sanitize_html('<a href="h://]">')
+    expected = "<a></a>"
+    assert expected == sanitized
+
+
+def test_data_uri_disallowed_type():
+    sanitized = sanitize_html('<audio controls="" src="data:text/html,<html>"></audio>')
+    expected = "<audio controls></audio>"
+    assert expected == sanitized
+
+
 def test_sanitizer():
     for ns, tag_name in sanitizer.allowed_elements:
+        if ns != constants.namespaces["html"]:
+            continue
         if tag_name in ['caption', 'col', 'colgroup', 'optgroup', 'option', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr']:
             continue  # TODO
         if tag_name != tag_name.lower():
@@ -63,6 +83,8 @@ def test_sanitizer():
                    "<%s title='1'>foo <bad>bar</bad> baz</%s>" % (tag_name, tag_name))
 
     for ns, attribute_name in sanitizer.allowed_attributes:
+        if ns != None:
+            continue
         if attribute_name != attribute_name.lower():
             continue  # TODO
         if attribute_name == 'style':
@@ -82,18 +104,6 @@ def test_sanitizer():
                "<img src=\"%s:%s\">foo</a>" % (protocol, rest_of_uri),
                """<img src="%s:%s">foo</a>""" % (protocol, rest_of_uri))
 
-    yield (runSanitizerTest, "test_invalid_data_uri",
-           "<audio controls=\"\"></audio>",
-           "<audio controls=\"\" src=\"data:foobar\"></audio>")
-
-    yield (runSanitizerTest, "test_invalid_ipv6_url",
-           "<a>",
-           "<a href=\"h://]\">")
-
-    yield (runSanitizerTest, "test_data_uri_disallowed_type",
-           "<audio controls=\"\"></audio>",
-           "<audio controls=\"\" src=\"data:text/html,<html>\"></audio>")
-
     for protocol in sanitizer.allowed_protocols:
         rest_of_uri = '//sub.domain.tld/path/object.ext'
         if protocol == 'data':
