diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2020-03-26 20:56:41 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2020-03-26 20:56:41 +0300 |
| commit | e5121cd2a1ea1df276317fa68765e969a0b21eae (patch) | |
| tree | 3b9732ce48aab909276c030b9a60d1c12cee2525 /spec/lib/banzai/filter/label_reference_filter_spec.rb | |
| parent | 4ee3ab616fc8b89b957b531294b67097941e49f6 (diff) | |
| parent | 63745c932cc8bc81fc2b2d30e9a171e346f4b969 (diff) | |
Merge remote-tracking branch 'dev/12-9-stable' into 12-9-stable
Diffstat (limited to 'spec/lib/banzai/filter/label_reference_filter_spec.rb')
| -rw-r--r-- | spec/lib/banzai/filter/label_reference_filter_spec.rb | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/spec/lib/banzai/filter/label_reference_filter_spec.rb b/spec/lib/banzai/filter/label_reference_filter_spec.rb index 5a672de13d7..de7a70db1ac 100644 --- a/spec/lib/banzai/filter/label_reference_filter_spec.rb +++ b/spec/lib/banzai/filter/label_reference_filter_spec.rb @@ -523,7 +523,12 @@ describe Banzai::Filter::LabelReferenceFilter do end context 'when group name has HTML entities' do - let(:another_group) { create(:group, name: '<img src=x onerror=alert(1)>', path: 'another_group') } + let(:another_group) { create(:group, name: 'random', path: 'another_group') } + + before do + another_group.name = "<img src=x onerror=alert(1)>" + another_group.save!(validate: false) + end it 'escapes the HTML entities' do expect(result.text) |