diff --git a/spec/helpers/format_helper_spec.rb b/spec/helpers/format_helper_spec.rb index 21198ffa..288d8441 100644 --- a/spec/helpers/format_helper_spec.rb +++ b/spec/helpers/format_helper_spec.rb @@ -9,6 +9,10 @@ describe FormatHelper, type: :helper do expect(markdown(nil)).to eq '' end + it "doesn't render unsafe URI schemes" do + expect(markdown('[a](javascript:b)')).to eq "
\n" + end + it 'should return HTML for header markdown' do expect(markdown('# this is my header')).to eq "