Andreas Hocevar
61 lines
2.1 KiB
JavaScript
61 lines
2.1 KiB
JavaScript
// Copyright 2013 The Closure Library Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS-IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
/**
|
|
* @fileoverview Unit tests for goog.html.TrustedResourceUrl and its builders.
|
|
*/
|
|
|
|
goog.provide('goog.html.trustedResourceUrlTest');
|
|
|
|
goog.require('goog.html.TrustedResourceUrl');
|
|
goog.require('goog.i18n.bidi.Dir');
|
|
goog.require('goog.string.Const');
|
|
goog.require('goog.testing.jsunit');
|
|
|
|
goog.setTestOnly('goog.html.trustedResourceUrlTest');
|
|
|
|
|
|
function testTrustedResourceUrl() {
|
|
var url = 'javascript:trusted();';
|
|
var trustedResourceUrl = goog.html.TrustedResourceUrl.fromConstant(
|
|
goog.string.Const.from(url));
|
|
var extracted = goog.html.TrustedResourceUrl.unwrap(trustedResourceUrl);
|
|
assertEquals(url, extracted);
|
|
assertEquals(url, trustedResourceUrl.getTypedStringValue());
|
|
assertEquals(
|
|
'TrustedResourceUrl{javascript:trusted();}', String(trustedResourceUrl));
|
|
|
|
// URLs are always LTR.
|
|
assertEquals(goog.i18n.bidi.Dir.LTR, trustedResourceUrl.getDirection());
|
|
|
|
// Interface markers are present.
|
|
assertTrue(trustedResourceUrl.implementsGoogStringTypedString);
|
|
assertTrue(trustedResourceUrl.implementsGoogI18nBidiDirectionalString);
|
|
}
|
|
|
|
|
|
/** @suppress {checkTypes} */
|
|
function testUnwrap() {
|
|
var evil = {};
|
|
evil.trustedResourceUrlValueWithSecurityContract_googHtmlSecurityPrivate_ =
|
|
'<script>evil()</script';
|
|
evil.TRUSTED_RESOURCE_URL_TYPE_MARKER_GOOG_HTML_SECURITY_PRIVATE_ = {};
|
|
|
|
var exception = assertThrows(function() {
|
|
goog.html.TrustedResourceUrl.unwrap(evil);
|
|
});
|
|
assertTrue(exception.message.indexOf(
|
|
'expected object of type TrustedResourceUrl') > 0);
|
|
}
|