From 4b78420d250df5e21763633871e486ee76728cc4 Mon Sep 17 00:00:00 2001
From: Florian Apolloner <florian@apolloner.eu>
Date: Mon, 15 Jul 2019 12:00:06 +0200
Subject: Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in
 strip_tags() when handling incomplete HTML entities.

Thanks to Guido Vranken for initial report.
---
 tests/utils_tests/test_html.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'tests/utils_tests/test_html.py')

diff --git a/tests/utils_tests/test_html.py b/tests/utils_tests/test_html.py
index 02825f5e1e..30f5ba68e8 100644
--- a/tests/utils_tests/test_html.py
+++ b/tests/utils_tests/test_html.py
@@ -90,6 +90,8 @@ class TestUtilsHtml(SimpleTestCase):
             ('&gotcha&#;<>', '&gotcha&#;<>'),
             ('<sc<!-- -->ript>test<<!-- -->/script>', 'ript>test'),
             ('<script>alert()</script>&h', 'alert()h'),
+            ('><!' + ('&' * 16000) + 'D', '><!' + ('&' * 16000) + 'D'),
+            ('X<<<<br>br>br>br>X', 'XX'),
         )
         for value, output in items:
             with self.subTest(value=value, output=output):
-- 
cgit v1.3