From c54a8a1238f3df5c375e5fa5cb4c8084f2b60ff4 Mon Sep 17 00:00:00 2001
From: Andrew Kvalheim <Andrew@Kvalhe.im>
Date: Fri, 3 Mar 2023 16:50:20 -0800
Subject: [PATCH] Add tests of HTML sanitization

---
 spec/helpers/format_helper_spec.rb | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/spec/helpers/format_helper_spec.rb b/spec/helpers/format_helper_spec.rb
index 4e64eb94..31adf107 100644
--- a/spec/helpers/format_helper_spec.rb
+++ b/spec/helpers/format_helper_spec.rb
@@ -16,5 +16,13 @@ describe FormatHelper, type: :helper do
     it 'should return HTML for header markdown' do
       expect(markdown('# this is my header')).to eq "<h1>this is my header</h1>\n"
     end
+
+    it 'escapes input HTML' do
+      expect(markdown('<em>*a*</em>')).to eq "<p>&lt;em&gt;<em>a</em>&lt;/em&gt;</p>\n"
+    end
+
+    it 'removes unallowed elements' do
+      expect(markdown('<em>*<style>a</style>*</em>', false)).to eq "<p><em><em>a</em></em></p>\n"
+    end
   end
 end