function XssTest::testFilterNormalizedHtml5

Checks that escaped HTML embedded in an attribute is not filtered.

See also

\Drupal\Component\Utility\HtmlSerializerRules

File

core/tests/Drupal/Tests/Component/Utility/XssTest.php, line 616

Class

XssTest

XSS Filtering tests.

Namespace

Code

public function testFilterNormalizedHtml5() : void {
    $input = '<span data-caption="foo &lt;em&gt;bar&lt;/em&gt;"></span>';
    $this->assertEquals($input, Xss::filter(Html::normalize($input), [
        'span',
    ]));
}