db97f9d08c
We were very inconsistent regarding these rules. Personally I prefer no empty lines around blocks, clases, etc... as recommended by the Ruby style guide [1], and they're the default values in rubocop, so those are the settings I'm applying. The exception is the `private` access modifier, since we were leaving empty lines around it most of the time. That's the default rubocop rule as well. Personally I don't have a strong preference about this one. [1] https://rubystyle.guide/#empty-lines-around-bodies
32 lines
1015 B
Ruby
32 lines
1015 B
Ruby
require "rails_helper"
|
|
|
|
describe AdminWYSIWYGSanitizer do
|
|
let(:sanitizer) { AdminWYSIWYGSanitizer.new }
|
|
|
|
describe "#sanitize" do
|
|
it "allows images" do
|
|
html = 'Dangerous<img src="/smile.png" alt="Smile" style="width: 10px;"> image'
|
|
expect(sanitizer.sanitize(html)).to eq(html)
|
|
end
|
|
|
|
it "allows tables" do
|
|
html = '<table align="center" border="2" cellpadding="2" cellspacing="2" dir="ltr" ' \
|
|
'id="table_id" class="stylesheet_classes" style="height:200px;width:500px;" ' \
|
|
'summary="summary">
|
|
<caption>caption</caption>
|
|
<tbody>
|
|
<tr>
|
|
<th scope="row">header 1</th>
|
|
<td>cell 1</td>
|
|
</tr>
|
|
<tr>
|
|
<th scope="row">header 2</th>
|
|
<td>cell 2</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>'
|
|
expect(sanitizer.sanitize(html)).to eq(html)
|
|
end
|
|
end
|
|
end
|