17 lines
757 B
Python
17 lines
757 B
Python
# retoor <retoor@molodetz.nl>
|
|
from tests.conftest import login_admin
|
|
|
|
|
|
def test_login_and_editor_preview(page, app_server):
|
|
login_admin(page, app_server)
|
|
page.goto(app_server + "/admin/posts/new", wait_until="domcontentloaded")
|
|
page.wait_for_selector("html[data-app=ready]")
|
|
page.fill("#body", "Een **vette** zin <script>alert(1)</script> [link](javascript:alert(1)) <b onclick=alert(1)>b</b>")
|
|
page.wait_for_function("document.querySelector('[data-preview-target] strong')")
|
|
preview = page.locator("[data-preview-target]").inner_html()
|
|
assert "<strong>vette</strong>" in preview
|
|
assert "<script" not in preview
|
|
assert "javascript:" not in preview
|
|
assert "onclick" not in preview
|
|
assert page.console_errors == []
|