| 896 | } |
| 897 | |
| 898 | static void test_safe(test_batch_runner *runner) { |
| 899 | // Test safe mode |
| 900 | static const char raw_html[] = "<div>\nhi\n</div>\n\n<a>hi</" |
| 901 | "a>\n[link](JAVAscript:alert('hi'))\n\n"; |
| 903 | char *html = cmark_markdown_to_html(raw_html, sizeof(raw_html) - 1, |
| 904 | CMARK_OPT_DEFAULT); |
| 905 | STR_EQ(runner, html, "<!-- raw HTML omitted -->\n<p><!-- raw HTML omitted " |
| 906 | "-->hi<!-- raw HTML omitted -->\n<a " |
| 907 | "href=\"\">link</a>\n<img src=\"\" alt=\"image\" " |
| 908 | "/></p>\n", |
| 909 | "input with raw HTML and dangerous links"); |
| 910 | free(html); |
| 911 | } |
| 912 | |
| 913 | static void test_md_to_html(test_batch_runner *runner, const char *markdown, |
| 914 | const char *expected_html, const char *msg) { |
no test coverage detected