Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'spec/helpers/integrations_helper_spec.rb')
-rw-r--r--spec/helpers/integrations_helper_spec.rb15
1 files changed, 15 insertions, 0 deletions
diff --git a/spec/helpers/integrations_helper_spec.rb b/spec/helpers/integrations_helper_spec.rb
index 8e652d2f150..3a7d4d12513 100644
--- a/spec/helpers/integrations_helper_spec.rb
+++ b/spec/helpers/integrations_helper_spec.rb
@@ -98,4 +98,19 @@ RSpec.describe IntegrationsHelper do
end
end
end
+
+ describe '#jira_issue_breadcrumb_link' do
+ let(:issue_reference) { nil }
+
+ subject { helper.jira_issue_breadcrumb_link(issue_reference) }
+
+ context 'when issue_reference contains HTML' do
+ let(:issue_reference) { "<script>alert('XSS')</script>" }
+
+ it 'escapes issue reference' do
+ is_expected.not_to include(issue_reference)
+ is_expected.to include(html_escape(issue_reference))
+ end
+ end
+ end
end