282 lines
6.9 KiB
Go
282 lines
6.9 KiB
Go
// Copyright 2011 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package template
|
|
|
|
import (
|
|
"strconv"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestEndsWithCSSKeyword(t *testing.T) {
|
|
tests := []struct {
|
|
css, kw string
|
|
want bool
|
|
}{
|
|
{"", "url", false},
|
|
{"url", "url", true},
|
|
{"URL", "url", true},
|
|
{"Url", "url", true},
|
|
{"url", "important", false},
|
|
{"important", "important", true},
|
|
{"image-url", "url", false},
|
|
{"imageurl", "url", false},
|
|
{"image url", "url", true},
|
|
}
|
|
for _, test := range tests {
|
|
got := endsWithCSSKeyword([]byte(test.css), test.kw)
|
|
if got != test.want {
|
|
t.Errorf("want %t but got %t for css=%v, kw=%v", test.want, got, test.css, test.kw)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestIsCSSNmchar(t *testing.T) {
|
|
tests := []struct {
|
|
rune rune
|
|
want bool
|
|
}{
|
|
{0, false},
|
|
{'0', true},
|
|
{'9', true},
|
|
{'A', true},
|
|
{'Z', true},
|
|
{'a', true},
|
|
{'z', true},
|
|
{'_', true},
|
|
{'-', true},
|
|
{':', false},
|
|
{';', false},
|
|
{' ', false},
|
|
{0x7f, false},
|
|
{0x80, true},
|
|
{0x1234, true},
|
|
{0xd800, false},
|
|
{0xdc00, false},
|
|
{0xfffe, false},
|
|
{0x10000, true},
|
|
{0x110000, false},
|
|
}
|
|
for _, test := range tests {
|
|
got := isCSSNmchar(test.rune)
|
|
if got != test.want {
|
|
t.Errorf("%q: want %t but got %t", string(test.rune), test.want, got)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestDecodeCSS(t *testing.T) {
|
|
tests := []struct {
|
|
css, want string
|
|
}{
|
|
{``, ``},
|
|
{`foo`, `foo`},
|
|
{`foo\`, `foo`},
|
|
{`foo\\`, `foo\`},
|
|
{`\`, ``},
|
|
{`\A`, "\n"},
|
|
{`\a`, "\n"},
|
|
{`\0a`, "\n"},
|
|
{`\00000a`, "\n"},
|
|
{`\000000a`, "\u0000a"},
|
|
{`\1234 5`, "\u1234" + "5"},
|
|
{`\1234\20 5`, "\u1234" + " 5"},
|
|
{`\1234\A 5`, "\u1234" + "\n5"},
|
|
{"\\1234\t5", "\u1234" + "5"},
|
|
{"\\1234\n5", "\u1234" + "5"},
|
|
{"\\1234\r\n5", "\u1234" + "5"},
|
|
{`\12345`, "\U00012345"},
|
|
{`\\`, `\`},
|
|
{`\\ `, `\ `},
|
|
{`\"`, `"`},
|
|
{`\'`, `'`},
|
|
{`\.`, `.`},
|
|
{`\. .`, `. .`},
|
|
{
|
|
`The \3c i\3equick\3c/i\3e,\d\A\3cspan style=\27 color:brown\27\3e brown\3c/span\3e fox jumps\2028over the \3c canine class=\22lazy\22 \3e dog\3c/canine\3e`,
|
|
"The <i>quick</i>,\r\n<span style='color:brown'>brown</span> fox jumps\u2028over the <canine class=\"lazy\">dog</canine>",
|
|
},
|
|
}
|
|
for _, test := range tests {
|
|
got1 := string(decodeCSS([]byte(test.css)))
|
|
if got1 != test.want {
|
|
t.Errorf("%q: want\n\t%q\nbut got\n\t%q", test.css, test.want, got1)
|
|
}
|
|
recoded := cssEscaper(got1)
|
|
if got2 := string(decodeCSS([]byte(recoded))); got2 != test.want {
|
|
t.Errorf("%q: escape & decode not dual for %q", test.css, recoded)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestHexDecode(t *testing.T) {
|
|
for i := 0; i < 0x200000; i += 101 /* coprime with 16 */ {
|
|
s := strconv.FormatInt(int64(i), 16)
|
|
if got := int(hexDecode([]byte(s))); got != i {
|
|
t.Errorf("%s: want %d but got %d", s, i, got)
|
|
}
|
|
s = strings.ToUpper(s)
|
|
if got := int(hexDecode([]byte(s))); got != i {
|
|
t.Errorf("%s: want %d but got %d", s, i, got)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestSkipCSSSpace(t *testing.T) {
|
|
tests := []struct {
|
|
css, want string
|
|
}{
|
|
{"", ""},
|
|
{"foo", "foo"},
|
|
{"\n", ""},
|
|
{"\r\n", ""},
|
|
{"\r", ""},
|
|
{"\t", ""},
|
|
{" ", ""},
|
|
{"\f", ""},
|
|
{" foo", "foo"},
|
|
{" foo", " foo"},
|
|
{`\20`, `\20`},
|
|
}
|
|
for _, test := range tests {
|
|
got := string(skipCSSSpace([]byte(test.css)))
|
|
if got != test.want {
|
|
t.Errorf("%q: want %q but got %q", test.css, test.want, got)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestCSSEscaper(t *testing.T) {
|
|
input := ("\x00\x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f" +
|
|
"\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f" +
|
|
` !"#$%&'()*+,-./` +
|
|
`0123456789:;<=>?` +
|
|
`@ABCDEFGHIJKLMNO` +
|
|
`PQRSTUVWXYZ[\]^_` +
|
|
"`abcdefghijklmno" +
|
|
"pqrstuvwxyz{|}~\x7f" +
|
|
"\u00A0\u0100\u2028\u2029\ufeff\U0001D11E")
|
|
|
|
want := ("\\0\x01\x02\x03\x04\x05\x06\x07" +
|
|
"\x08\\9 \\a\x0b\\c \\d\x0E\x0F" +
|
|
"\x10\x11\x12\x13\x14\x15\x16\x17" +
|
|
"\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f" +
|
|
` !\22#$%\26\27\28\29*\2b,-.\2f ` +
|
|
`0123456789\3a\3b\3c=\3e?` +
|
|
`@ABCDEFGHIJKLMNO` +
|
|
`PQRSTUVWXYZ[\\]^_` +
|
|
"`abcdefghijklmno" +
|
|
`pqrstuvwxyz\7b|\7d~` + "\u007f" +
|
|
"\u00A0\u0100\u2028\u2029\ufeff\U0001D11E")
|
|
|
|
got := cssEscaper(input)
|
|
if got != want {
|
|
t.Errorf("encode: want\n\t%q\nbut got\n\t%q", want, got)
|
|
}
|
|
|
|
got = string(decodeCSS([]byte(got)))
|
|
if input != got {
|
|
t.Errorf("decode: want\n\t%q\nbut got\n\t%q", input, got)
|
|
}
|
|
}
|
|
|
|
func TestCSSValueFilter(t *testing.T) {
|
|
tests := []struct {
|
|
css, want string
|
|
}{
|
|
{"", ""},
|
|
{"foo", "foo"},
|
|
{"0", "0"},
|
|
{"0px", "0px"},
|
|
{"-5px", "-5px"},
|
|
{"1.25in", "1.25in"},
|
|
{"+.33em", "+.33em"},
|
|
{"100%", "100%"},
|
|
{"12.5%", "12.5%"},
|
|
{".foo", ".foo"},
|
|
{"#bar", "#bar"},
|
|
{"corner-radius", "corner-radius"},
|
|
{"-moz-corner-radius", "-moz-corner-radius"},
|
|
{"#000", "#000"},
|
|
{"#48f", "#48f"},
|
|
{"#123456", "#123456"},
|
|
{"U+00-FF, U+980-9FF", "U+00-FF, U+980-9FF"},
|
|
{"color: red", "color: red"},
|
|
{"<!--", "ZgotmplZ"},
|
|
{"-->", "ZgotmplZ"},
|
|
{"<![CDATA[", "ZgotmplZ"},
|
|
{"]]>", "ZgotmplZ"},
|
|
{"</style", "ZgotmplZ"},
|
|
{`"`, "ZgotmplZ"},
|
|
{`'`, "ZgotmplZ"},
|
|
{"`", "ZgotmplZ"},
|
|
{"\x00", "ZgotmplZ"},
|
|
{"/* foo */", "ZgotmplZ"},
|
|
{"//", "ZgotmplZ"},
|
|
{"[href=~", "ZgotmplZ"},
|
|
{"expression(alert(1337))", "ZgotmplZ"},
|
|
{"-expression(alert(1337))", "ZgotmplZ"},
|
|
{"expression", "ZgotmplZ"},
|
|
{"Expression", "ZgotmplZ"},
|
|
{"EXPRESSION", "ZgotmplZ"},
|
|
{"-moz-binding", "ZgotmplZ"},
|
|
{"-expr\x00ession(alert(1337))", "ZgotmplZ"},
|
|
{`-expr\0ession(alert(1337))`, "ZgotmplZ"},
|
|
{`-express\69on(alert(1337))`, "ZgotmplZ"},
|
|
{`-express\69 on(alert(1337))`, "ZgotmplZ"},
|
|
{`-exp\72 ession(alert(1337))`, "ZgotmplZ"},
|
|
{`-exp\52 ession(alert(1337))`, "ZgotmplZ"},
|
|
{`-exp\000052 ession(alert(1337))`, "ZgotmplZ"},
|
|
{`-expre\0000073sion`, "-expre\x073sion"},
|
|
{`@import url evil.css`, "ZgotmplZ"},
|
|
}
|
|
for _, test := range tests {
|
|
got := cssValueFilter(test.css)
|
|
if got != test.want {
|
|
t.Errorf("%q: want %q but got %q", test.css, test.want, got)
|
|
}
|
|
}
|
|
}
|
|
|
|
func BenchmarkCSSEscaper(b *testing.B) {
|
|
for i := 0; i < b.N; i++ {
|
|
cssEscaper("The <i>quick</i>,\r\n<span style='color:brown'>brown</span> fox jumps\u2028over the <canine class=\"lazy\">dog</canine>")
|
|
}
|
|
}
|
|
|
|
func BenchmarkCSSEscaperNoSpecials(b *testing.B) {
|
|
for i := 0; i < b.N; i++ {
|
|
cssEscaper("The quick, brown fox jumps over the lazy dog.")
|
|
}
|
|
}
|
|
|
|
func BenchmarkDecodeCSS(b *testing.B) {
|
|
s := []byte(`The \3c i\3equick\3c/i\3e,\d\A\3cspan style=\27 color:brown\27\3e brown\3c/span\3e fox jumps\2028over the \3c canine class=\22lazy\22 \3edog\3c/canine\3e`)
|
|
b.ResetTimer()
|
|
for i := 0; i < b.N; i++ {
|
|
decodeCSS(s)
|
|
}
|
|
}
|
|
|
|
func BenchmarkDecodeCSSNoSpecials(b *testing.B) {
|
|
s := []byte("The quick, brown fox jumps over the lazy dog.")
|
|
b.ResetTimer()
|
|
for i := 0; i < b.N; i++ {
|
|
decodeCSS(s)
|
|
}
|
|
}
|
|
|
|
func BenchmarkCSSValueFilter(b *testing.B) {
|
|
for i := 0; i < b.N; i++ {
|
|
cssValueFilter(` e\78preS\0Sio/**/n(alert(1337))`)
|
|
}
|
|
}
|
|
|
|
func BenchmarkCSSValueFilterOk(b *testing.B) {
|
|
for i := 0; i < b.N; i++ {
|
|
cssValueFilter(`Times New Roman`)
|
|
}
|
|
}
|