tests/HTMLPurifier/Strategy/ValidateAttributesTest.php

   1 <?php
   2
   3 require_once('HTMLPurifier/Config.php');
   4 require_once('HTMLPurifier/StrategyHarness.php');
   5 require_once('HTMLPurifier/Strategy/ValidateAttributes.php');
   6
   7 class HTMLPurifier_Strategy_ValidateAttributesTest extends
   8       HTMLPurifier_StrategyHarness
   9 {
  10
  11     function setUp() {
  12         parent::setUp();
  13         $this->obj = new HTMLPurifier_Strategy_ValidateAttributes();
  14         $this->config = array('HTML.Doctype' => 'XHTML 1.0 Strict');
  15     }
  16
  17     function testEmpty() {
  18         $this->assertResult('');
  19     }
  20
  21     function testIDs() {
  22         $this->assertResult(
  23             '<div id="valid">Kill the ID.</div>',
  24             '<div>Kill the ID.</div>'
  25         );
  26
  27         $this->assertResult('<div id="valid">Preserve the ID.</div>', true,
  28             array('HTML.EnableAttrID' => true));
  29
  30         $this->assertResult(
  31             '<div id="0invalid">Kill the ID.</div>',
  32             '<div>Kill the ID.</div>',
  33             array('HTML.EnableAttrID' => true)
  34         );
  35
  36         // test id accumulator
  37         $this->assertResult(
  38             '<div id="valid">Valid</div><div id="valid">Invalid</div>',
  39             '<div id="valid">Valid</div><div>Invalid</div>',
  40             array('HTML.EnableAttrID' => true)
  41         );
  42
  43         $this->assertResult(
  44             '<span dir="up-to-down">Bad dir.</span>',
  45             '<span>Bad dir.</span>'
  46         );
  47
  48         // test attribute key case sensitivity
  49         $this->assertResult(
  50             '<div ID="valid">Convert ID to lowercase.</div>',
  51             '<div id="valid">Convert ID to lowercase.</div>',
  52             array('HTML.EnableAttrID' => true)
  53         );
  54
  55         // test simple attribute substitution
  56         $this->assertResult(
  57             '<div id=" valid ">Trim whitespace.</div>',
  58             '<div id="valid">Trim whitespace.</div>',
  59             array('HTML.EnableAttrID' => true)
  60         );
  61
  62         // test configuration id blacklist
  63         $this->assertResult(
  64             '<div id="invalid">Invalid</div>',
  65             '<div>Invalid</div>',
  66             array(
  67                 'Attr.IDBlacklist' => array('invalid'),
  68                 'HTML.EnableAttrID' => true
  69             )
  70         );
  71
  72         // name rewritten as id
  73         $this->assertResult(
  74             '<a name="foobar" />',
  75             '<a id="foobar" />',
  76             array('HTML.EnableAttrID' => true)
  77         );
  78     }
  79
  80     function testClasses() {
  81         $this->assertResult('<div class="valid">Valid</div>');
  82
  83         $this->assertResult(
  84             '<div class="valid 0invalid">Keep valid.</div>',
  85             '<div class="valid">Keep valid.</div>'
  86         );
  87     }
  88
  89     function testTitle() {
  90         $this->assertResult(
  91             '<acronym title="PHP: Hypertext Preprocessor">PHP</acronym>'
  92         );
  93     }
  94
  95     function testLang() {
  96         $this->assertResult(
  97             '<span lang="fr">La soupe.</span>',
  98             '<span lang="fr" xml:lang="fr">La soupe.</span>'
  99         );
 100
 101         // test only xml:lang for XHTML 1.1
 102         $this->assertResult(
 103             '<b lang="en">asdf</b>',
 104             '<b xml:lang="en">asdf</b>', array('HTML.Doctype' => 'XHTML 1.1')
 105         );
 106     }
 107
 108     function testAlign() {
 109
 110         $this->assertResult(
 111             '<h1 align="center">Centered Headline</h1>',
 112             '<h1 style="text-align:center;">Centered Headline</h1>'
 113         );
 114         $this->assertResult(
 115             '<h1 align="right">Right-aligned Headline</h1>',
 116             '<h1 style="text-align:right;">Right-aligned Headline</h1>'
 117         );
 118         $this->assertResult(
 119             '<h1 align="left">Left-aligned Headline</h1>',
 120             '<h1 style="text-align:left;">Left-aligned Headline</h1>'
 121         );
 122         $this->assertResult(
 123             '<p align="justify">Justified Paragraph</p>',
 124             '<p style="text-align:justify;">Justified Paragraph</p>'
 125         );
 126         $this->assertResult(
 127             '<h1 align="invalid">Invalid Headline</h1>',
 128             '<h1>Invalid Headline</h1>'
 129         );
 130
 131     }
 132
 133     function testTable() {
 134         $this->assertResult(
 135 '<table frame="above" rules="rows" summary="A test table" border="2" cellpadding="5%" cellspacing="3" width="100%">
 136     <col align="right" width="4*" />
 137     <col charoff="5" align="char" width="*" />
 138     <tr valign="top">
 139         <th abbr="name">Fiddly name</th>
 140         <th abbr="price">Super-duper-price</th>
 141     </tr>
 142     <tr>
 143         <td abbr="carrot">Carrot Humungous</td>
 144         <td>$500.23</td>
 145     </tr>
 146     <tr>
 147         <td colspan="2">Taken off the market</td>
 148     </tr>
 149 </table>'
 150         );
 151
 152         // test col.span is non-zero
 153         $this->assertResult(
 154             '<col span="0" />',
 155             '<col />'
 156         );
 157         // lengths
 158         $this->assertResult(
 159             '<td width="5%" height="10" /><th width="10" height="5%" /><hr width="10" height="10" />',
 160             '<td style="width:5%;height:10px;" /><th style="width:10px;height:5%;" /><hr style="width:10px;" />'
 161         );
 162         // td boolean transformation
 163         $this->assertResult(
 164             '<td nowrap />',
 165             '<td style="white-space:nowrap;" />'
 166         );
 167
 168         // caption align transformation
 169         $this->assertResult(
 170             '<caption align="left" />',
 171             '<caption style="text-align:left;" />'
 172         );
 173         $this->assertResult(
 174             '<caption align="right" />',
 175             '<caption style="text-align:right;" />'
 176         );
 177         $this->assertResult(
 178             '<caption align="top" />',
 179             '<caption style="caption-side:top;" />'
 180         );
 181         $this->assertResult(
 182             '<caption align="bottom" />',
 183             '<caption style="caption-side:bottom;" />'
 184         );
 185         $this->assertResult(
 186             '<caption align="nonsense" />',
 187             '<caption />'
 188         );
 189
 190         // align transformation
 191         $this->assertResult(
 192             '<table align="left" />',
 193             '<table style="float:left;" />'
 194         );
 195         $this->assertResult(
 196             '<table align="center" />',
 197             '<table style="margin-left:auto;margin-right:auto;" />'
 198         );
 199         $this->assertResult(
 200             '<table align="right" />',
 201             '<table style="float:right;" />'
 202         );
 203         $this->assertResult(
 204             '<table align="top" />',
 205             '<table />'
 206         );
 207     }
 208
 209     function testURI() {
 210         $this->assertResult('<a href="http://www.google.com/">Google</a>');
 211
 212         // test invalid URI
 213         $this->assertResult(
 214             '<a href="javascript:badstuff();">Google</a>',
 215             '<a>Google</a>'
 216         );
 217     }
 218
 219     function testImg() {
 220         $this->assertResult(
 221             '<img />',
 222             '<img src="" alt="Invalid image" />',
 223             array('Core.RemoveInvalidImg' => false)
 224         );
 225
 226         $this->assertResult(
 227             '<img src="foobar.jpg" />',
 228             '<img src="foobar.jpg" alt="foobar.jpg" />'
 229         );
 230
 231         $this->assertResult(
 232             '<img alt="pretty picture" />',
 233             '<img alt="pretty picture" src="" />',
 234             array('Core.RemoveInvalidImg' => false)
 235         );
 236         // mailto in image is not allowed
 237         $this->assertResult(
 238             '<img src="mailto:foo@example.com" />',
 239             '<img alt="mailto:foo@example.com" src="" />',
 240             array('Core.RemoveInvalidImg' => false)
 241         );
 242         // align transformation
 243         $this->assertResult(
 244             '<img src="foobar.jpg" alt="foobar" align="left" />',
 245             '<img src="foobar.jpg" alt="foobar" style="float:left;" />'
 246         );
 247         $this->assertResult(
 248             '<img src="foobar.jpg" alt="foobar" align="right" />',
 249             '<img src="foobar.jpg" alt="foobar" style="float:right;" />'
 250         );
 251         $this->assertResult(
 252             '<img src="foobar.jpg" alt="foobar" align="bottom" />',
 253             '<img src="foobar.jpg" alt="foobar" style="vertical-align:baseline;" />'
 254         );
 255         $this->assertResult(
 256             '<img src="foobar.jpg" alt="foobar" align="middle" />',
 257             '<img src="foobar.jpg" alt="foobar" style="vertical-align:middle;" />'
 258         );
 259         $this->assertResult(
 260             '<img src="foobar.jpg" alt="foobar" align="top" />',
 261             '<img src="foobar.jpg" alt="foobar" style="vertical-align:top;" />'
 262         );
 263         $this->assertResult(
 264             '<img src="foobar.jpg" alt="foobar" align="outerspace" />',
 265             '<img src="foobar.jpg" alt="foobar" />'
 266         );
 267
 268     }
 269
 270     function testBdo() {
 271         // test required attributes for bdo
 272         $this->assertResult(
 273             '<bdo>Go left.</bdo>',
 274             '<bdo dir="ltr">Go left.</bdo>'
 275         );
 276
 277         $this->assertResult(
 278             '<bdo dir="blahblah">Invalid value!</bdo>',
 279             '<bdo dir="ltr">Invalid value!</bdo>'
 280         );
 281     }
 282
 283     function testDir() {
 284         // see testBdo, behavior is subtly different
 285         $this->assertResult(
 286             '<span dir="blahblah">Invalid value!</span>',
 287             '<span>Invalid value!</span>'
 288         );
 289     }
 290
 291     function testLinks() {
 292         // link types
 293         $this->assertResult(
 294             '<a href="foo" rel="nofollow" />',
 295             true,
 296             array('Attr.AllowedRel' => 'nofollow')
 297         );
 298         // link targets
 299         $this->assertResult(
 300             '<a href="foo" target="_top" />',
 301             true,
 302             array('Attr.AllowedFrameTargets' => '_top',
 303                 'HTML.Doctype' => 'XHTML 1.0 Transitional')
 304         );
 305         $this->assertResult(
 306             '<a href="foo" target="_top" />',
 307             '<a href="foo" />'
 308         );
 309         $this->assertResult(
 310             '<a href="foo" target="_top" />',
 311             '<a href="foo" />',
 312             array('Attr.AllowedFrameTargets' => '_top', 'HTML.Strict' => true)
 313         );
 314     }
 315
 316     function testBorder() {
 317         // border
 318         $this->assertResult(
 319             '<img src="foo" alt="foo" hspace="1" vspace="3" />',
 320             '<img src="foo" alt="foo" style="margin-top:3px;margin-bottom:3px;margin-left:1px;margin-right:1px;" />',
 321             array('Attr.AllowedRel' => 'nofollow')
 322         );
 323     }
 324
 325     function testHr() {
 326         $this->assertResult(
 327             '<hr size="3" />',
 328             '<hr style="height:3px;" />'
 329         );
 330         $this->assertResult(
 331             '<hr noshade />',
 332             '<hr style="color:#808080;background-color:#808080;border:0;" />'
 333         );
 334         // align transformation
 335         $this->assertResult(
 336             '<hr align="left" />',
 337             '<hr style="margin-left:0;margin-right:auto;text-align:left;" />'
 338         );
 339         $this->assertResult(
 340             '<hr align="center" />',
 341             '<hr style="margin-left:auto;margin-right:auto;text-align:center;" />'
 342         );
 343         $this->assertResult(
 344             '<hr align="right" />',
 345             '<hr style="margin-left:auto;margin-right:0;text-align:right;" />'
 346         );
 347         $this->assertResult(
 348             '<hr align="bottom" />',
 349             '<hr />'
 350         );
 351     }
 352
 353     function testBr() {
 354         // br clear transformation
 355         $this->assertResult(
 356             '<br clear="left" />',
 357             '<br style="clear:left;" />'
 358         );
 359         $this->assertResult(
 360             '<br clear="right" />',
 361             '<br style="clear:right;" />'
 362         );
 363         $this->assertResult( // test both?
 364             '<br clear="all" />',
 365             '<br style="clear:both;" />'
 366         );
 367         $this->assertResult(
 368             '<br clear="none" />',
 369             '<br style="clear:none;" />'
 370         );
 371         $this->assertResult(
 372             '<br clear="foo" />',
 373             '<br />'
 374         );
 375     }
 376
 377     function testListTypeTransform() {
 378         // ul
 379         $this->assertResult(
 380             '<ul type="disc" />',
 381             '<ul style="list-style-type:disc;" />'
 382         );
 383         $this->assertResult(
 384             '<ul type="square" />',
 385             '<ul style="list-style-type:square;" />'
 386         );
 387         $this->assertResult(
 388             '<ul type="circle" />',
 389             '<ul style="list-style-type:circle;" />'
 390         );
 391         $this->assertResult( // case insensitive
 392             '<ul type="CIRCLE" />',
 393             '<ul style="list-style-type:circle;" />'
 394         );
 395         $this->assertResult(
 396             '<ul type="a" />',
 397             '<ul />'
 398         );
 399         // ol
 400         $this->assertResult(
 401             '<ol type="1" />',
 402             '<ol style="list-style-type:decimal;" />'
 403         );
 404         $this->assertResult(
 405             '<ol type="i" />',
 406             '<ol style="list-style-type:lower-roman;" />'
 407         );
 408         $this->assertResult(
 409             '<ol type="I" />',
 410             '<ol style="list-style-type:upper-roman;" />'
 411         );
 412         $this->assertResult(
 413             '<ol type="a" />',
 414             '<ol style="list-style-type:lower-alpha;" />'
 415         );
 416         $this->assertResult(
 417             '<ol type="A" />',
 418             '<ol style="list-style-type:upper-alpha;" />'
 419         );
 420         $this->assertResult(
 421             '<ol type="disc" />',
 422             '<ol />'
 423         );
 424         // li
 425         $this->assertResult(
 426             '<li type="circle" />',
 427             '<li style="list-style-type:circle;" />'
 428         );
 429         $this->assertResult(
 430             '<li type="A" />',
 431             '<li style="list-style-type:upper-alpha;" />'
 432         );
 433         $this->assertResult( // case sensitive
 434             '<li type="CIRCLE" />',
 435             '<li />'
 436         );
 437
 438     }
 439
 440 }
 441
 442