Function TestUntrusted_fmt_paths_never_leak

pkg/iostreams/untrusted_test.go:22–35

The property that drove the design: fmt reflection must not leak the raw bytes through any verb. Because Untrusted implements Stringer, %s, %v, and the Print family all route through String() and sanitize.

(t *testing.T)

// bytes through any verb. Because Untrusted implements Stringer, %s, %v, and the
// Print family all route through String() and sanitize.
func TestUntrusted_fmt_paths_never_leak(t *testing.T) {
	u := NewUntrusted("x" + esc + "]0;title" + esc + "\\")
	cases := map[string]string{
		"%s":     fmt.Sprintf("%s", u),
		"%v":     fmt.Sprintf("%v", u),
		"Sprint": fmt.Sprint(u),
		"woven":  fmt.Sprintf("by %s here", u),
	}
	for name, out := range cases {
		t.Run(name, func(t *testing.T) {
			assert.NotContains(t, out, esc)
		})
	}
}

func TestUntrusted_Raw_returnsExactBytes(t *testing.T) {
	payload := "x" + esc + "[1mbold"