2020-03-23 03:08:41 +01:00
|
|
|
// ██████╗ █████╗ ███████╗███████╗██╗███╗ ██╗ ██████╗
|
|
|
|
|
// ██╔══██╗██╔══██╗██╔════╝██╔════╝██║████╗ ██║██╔════╝
|
|
|
|
|
// ██████╔╝███████║███████╗███████╗██║██╔██╗ ██║██║ ███╗
|
|
|
|
|
// ██╔═══╝ ██╔══██║╚════██║╚════██║██║██║╚██╗██║██║ ██║
|
|
|
|
|
// ██║ ██║ ██║███████║███████║██║██║ ╚████║╚██████╔╝
|
|
|
|
|
// ╚═╝ ╚═╝ ╚═╝╚══════╝╚══════╝╚═╝╚═╝ ╚═══╝ ╚═════╝
|
|
|
|
|
|
2020-05-23 09:49:04 +02:00
|
|
|
#[cfg(test)]
|
|
|
|
|
mod passing {
|
|
|
|
|
use crate::html;
|
|
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
|
fn div_as_root_element() {
|
|
|
|
|
let html = "<div><script src=\"some.js\"></script></div>";
|
|
|
|
|
let dom = html::html_to_dom(&html);
|
|
|
|
|
|
|
|
|
|
let opt_no_css: bool = false;
|
|
|
|
|
let opt_no_frames: bool = false;
|
|
|
|
|
let opt_no_js: bool = false;
|
|
|
|
|
let opt_no_images: bool = false;
|
|
|
|
|
let opt_isolate: bool = false;
|
|
|
|
|
|
|
|
|
|
assert_eq!(
|
|
|
|
|
html::stringify_document(
|
|
|
|
|
&dom.document,
|
|
|
|
|
opt_no_css,
|
|
|
|
|
opt_no_frames,
|
|
|
|
|
opt_no_js,
|
|
|
|
|
opt_no_images,
|
|
|
|
|
opt_isolate,
|
|
|
|
|
),
|
|
|
|
|
"<html><head></head><body><div><script src=\"some.js\"></script></div></body></html>"
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
|
fn full_page_with_no_html_head_or_body() {
|
|
|
|
|
let html = "<title>Isolated document</title>\
|
|
|
|
|
<link rel=\"something\" href=\"some.css\" />\
|
|
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src https:\">\
|
|
|
|
|
<div><script src=\"some.js\"></script></div>";
|
|
|
|
|
let dom = html::html_to_dom(&html);
|
|
|
|
|
|
|
|
|
|
let opt_no_css: bool = false;
|
|
|
|
|
let opt_no_frames: bool = false;
|
|
|
|
|
let opt_no_js: bool = false;
|
|
|
|
|
let opt_no_images: bool = false;
|
|
|
|
|
let opt_isolate: bool = true;
|
|
|
|
|
|
|
|
|
|
assert_eq!(
|
|
|
|
|
html::stringify_document(
|
|
|
|
|
&dom.document,
|
|
|
|
|
opt_no_css,
|
|
|
|
|
opt_no_frames,
|
|
|
|
|
opt_no_js,
|
|
|
|
|
opt_no_images,
|
|
|
|
|
opt_isolate,
|
|
|
|
|
),
|
|
|
|
|
"<html>\
|
2020-03-23 03:08:41 +01:00
|
|
|
<head>\
|
2020-05-23 09:49:04 +02:00
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'unsafe-inline' data:;\"></meta>\
|
|
|
|
|
<title>Isolated document</title>\
|
|
|
|
|
<link rel=\"something\" href=\"some.css\">\
|
2020-03-23 03:08:41 +01:00
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src https:\">\
|
|
|
|
|
</head>\
|
|
|
|
|
<body>\
|
|
|
|
|
<div>\
|
|
|
|
|
<script src=\"some.js\"></script>\
|
|
|
|
|
</div>\
|
|
|
|
|
</body>\
|
|
|
|
|
</html>"
|
2020-05-23 09:49:04 +02:00
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
|
fn doctype_and_the_rest_no_html_head_or_body() {
|
|
|
|
|
let html = "<!doctype html>\
|
|
|
|
|
<title>Unstyled document</title>\
|
|
|
|
|
<link rel=\"stylesheet\" href=\"main.css\"/>\
|
|
|
|
|
<div style=\"display: none;\"></div>";
|
|
|
|
|
let dom = html::html_to_dom(&html);
|
|
|
|
|
|
|
|
|
|
let opt_no_css: bool = true;
|
|
|
|
|
let opt_no_frames: bool = false;
|
|
|
|
|
let opt_no_js: bool = false;
|
|
|
|
|
let opt_no_images: bool = false;
|
|
|
|
|
let opt_isolate: bool = false;
|
|
|
|
|
|
|
|
|
|
assert_eq!(
|
|
|
|
|
html::stringify_document(
|
|
|
|
|
&dom.document,
|
|
|
|
|
opt_no_css,
|
|
|
|
|
opt_no_frames,
|
|
|
|
|
opt_no_js,
|
|
|
|
|
opt_no_images,
|
|
|
|
|
opt_isolate,
|
|
|
|
|
),
|
|
|
|
|
"<!DOCTYPE html>\
|
|
|
|
|
<html>\
|
|
|
|
|
<head>\
|
|
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"style-src 'none';\"></meta>\
|
|
|
|
|
<title>Unstyled document</title>\
|
|
|
|
|
<link rel=\"stylesheet\" href=\"main.css\">\
|
|
|
|
|
</head>\
|
|
|
|
|
<body><div style=\"display: none;\"></div></body>\
|
|
|
|
|
</html>"
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
|
fn doctype_and_the_rest_no_html_head_or_body_forbid_frames() {
|
|
|
|
|
let html = "<!doctype html>\
|
|
|
|
|
<title>Frameless document</title>\
|
|
|
|
|
<link rel=\"something\"/>\
|
|
|
|
|
<div><script src=\"some.js\"></script></div>";
|
|
|
|
|
let dom = html::html_to_dom(&html);
|
|
|
|
|
|
|
|
|
|
let opt_no_css: bool = false;
|
|
|
|
|
let opt_no_frames: bool = true;
|
|
|
|
|
let opt_no_js: bool = false;
|
|
|
|
|
let opt_no_images: bool = false;
|
|
|
|
|
let opt_isolate: bool = false;
|
|
|
|
|
|
|
|
|
|
assert_eq!(
|
|
|
|
|
html::stringify_document(
|
|
|
|
|
&dom.document,
|
|
|
|
|
opt_no_css,
|
|
|
|
|
opt_no_frames,
|
|
|
|
|
opt_no_js,
|
|
|
|
|
opt_no_images,
|
|
|
|
|
opt_isolate,
|
|
|
|
|
),
|
|
|
|
|
"<!DOCTYPE html>\
|
|
|
|
|
<html>\
|
|
|
|
|
<head>\
|
2020-06-26 22:19:44 +02:00
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"frame-src 'none'; child-src 'none';\"></meta>\
|
2020-05-23 09:49:04 +02:00
|
|
|
<title>Frameless document</title>\
|
|
|
|
|
<link rel=\"something\">\
|
|
|
|
|
</head>\
|
|
|
|
|
<body><div><script src=\"some.js\"></script></div></body>\
|
|
|
|
|
</html>"
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[test]
|
|
|
|
|
fn doctype_and_the_rest_all_forbidden() {
|
|
|
|
|
let html = "<!doctype html>\
|
|
|
|
|
<title>no-frame no-css no-js no-image isolated document</title>\
|
|
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src https:\">\
|
|
|
|
|
<link rel=\"stylesheet\" href=\"some.css\">\
|
|
|
|
|
<div>\
|
|
|
|
|
<script src=\"some.js\"></script>\
|
|
|
|
|
<img style=\"width: 100%;\" src=\"some.png\" />\
|
|
|
|
|
<iframe src=\"some.html\"></iframe>\
|
|
|
|
|
</div>";
|
|
|
|
|
let dom = html::html_to_dom(&html);
|
|
|
|
|
|
|
|
|
|
let opt_isolate: bool = true;
|
|
|
|
|
let opt_no_css: bool = true;
|
|
|
|
|
let opt_no_frames: bool = true;
|
|
|
|
|
let opt_no_js: bool = true;
|
|
|
|
|
let opt_no_images: bool = true;
|
|
|
|
|
|
|
|
|
|
assert_eq!(
|
|
|
|
|
html::stringify_document(
|
|
|
|
|
&dom.document,
|
|
|
|
|
opt_no_css,
|
|
|
|
|
opt_no_frames,
|
|
|
|
|
opt_no_js,
|
|
|
|
|
opt_no_images,
|
|
|
|
|
opt_isolate,
|
|
|
|
|
),
|
|
|
|
|
"<!DOCTYPE html>\
|
|
|
|
|
<html>\
|
|
|
|
|
<head>\
|
2020-06-26 22:19:44 +02:00
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'unsafe-inline' data:; style-src 'none'; frame-src 'none'; child-src 'none'; script-src 'none'; img-src data:;\"></meta>\
|
2020-05-23 09:49:04 +02:00
|
|
|
<title>no-frame no-css no-js no-image isolated document</title>\
|
|
|
|
|
<meta http-equiv=\"Content-Security-Policy\" content=\"default-src https:\">\
|
|
|
|
|
<link rel=\"stylesheet\" href=\"some.css\">\
|
|
|
|
|
</head>\
|
|
|
|
|
<body>\
|
|
|
|
|
<div>\
|
|
|
|
|
<script src=\"some.js\"></script>\
|
|
|
|
|
<img style=\"width: 100%;\" src=\"some.png\">\
|
|
|
|
|
<iframe src=\"some.html\"></iframe>\
|
|
|
|
|
</div>\
|
|
|
|
|
</body>\
|
|
|
|
|
</html>"
|
|
|
|
|
);
|
|
|
|
|
}
|
2020-03-23 03:08:41 +01:00
|
|
|
}
|
