From 6ca6c36f82b97eafeada61384b2e2f1d0587da86 Mon Sep 17 00:00:00 2001
From: Claude Paroz <claude@2xlibre.net>
Date: Thu, 20 Mar 2014 16:50:50 +0100
Subject: Improved strip_tags and clarified documentation

The fact that strip_tags cannot guarantee to really strip all
non-safe HTML content was not clear enough. Also see:
https://www.djangoproject.com/weblog/2014/mar/22/strip-tags-advisory/
---
 tests/utils_tests/test_html.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'tests/utils_tests/test_html.py')

diff --git a/tests/utils_tests/test_html.py b/tests/utils_tests/test_html.py
index b4e61b9fd6..70de3a078e 100644
--- a/tests/utils_tests/test_html.py
+++ b/tests/utils_tests/test_html.py
@@ -80,6 +80,8 @@ class TestUtilsHtml(TestCase):
             ('a<p a >b</p>c', 'abc'),
             ('d<a:b c:d>e</p>f', 'def'),
             ('<strong>foo</strong><a href="http://example.com">bar</a>', 'foobar'),
+            ('<sc<!-- -->ript>test<<!-- -->/script>', 'test'),
+            ('<script>alert()</script>&h', 'alert()&h'),
         )
         for value, output in items:
             self.check_output(f, value, output)
-- 
cgit v1.3