diff --git a/test/misc.js b/test/misc.js index b32aacf..b87f924 100644 --- a/test/misc.js +++ b/test/misc.js @@ -297,11 +297,30 @@ describe('Links validation', function () { it('default should allow common data:image/*', function () { var md = markdownit(); - assert.strictEqual(md.render('![test](data:image/gif;base64,)'), '

test

\n'); - assert.strictEqual(md.render('![test](data:image/png;base64,)'), '

test

\n'); - assert.strictEqual(md.render('![test](data:image/jpeg;base64,)'), '

test

\n'); - assert.strictEqual(md.render('![test](data:image/svg+xml;base64,)'), '

test

\n'); - assert.strictEqual(md.render('![test](data:image/webp;base64,)'), '

test

\n'); + assert.strictEqual( + md.render('![test](data:image/gif;base64,)'), + '

test

\n' + ); + + assert.strictEqual( + md.render('![test](data:image/png;base64,)'), + '

test

\n' + ); + + assert.strictEqual( + md.render('![test](data:image/jpeg;base64,)'), + '

test

\n' + ); + + assert.strictEqual( + md.render('![test](data:image/svg+xml;base64,)'), + '

test

\n' + ); + + assert.strictEqual( + md.render('![test](data:image/webp;base64,)'), + '

test

\n' + ); }); it('default should allow tel: and map:', function () { @@ -315,12 +334,35 @@ describe('Links validation', function () { var md = markdownit(); // Note: MIME type of SVG is "image/svg+xml", but not "image/svg". - assert.strictEqual(md.render('![test](data:image/svg;base64,)'), '

![test](data:image/svg;base64,)

\n'); - assert.strictEqual(md.render('![test](data:image/vnd-something;base64,)'), '

![test](data:image/vnd-something;base64,)

\n'); - assert.strictEqual(md.render('![test](data:text/javascript;base64,)'), '

![test](data:text/javascript;base64,)

\n'); - assert.strictEqual(md.render('![test](vbscript:alert())'), '

![test](vbscript:alert())

\n'); - assert.strictEqual(md.render('![test](javascript:alert())'), '

![test](javascript:alert())

\n'); - assert.strictEqual(md.render('![test](file:/root.txt)'), '

![test](file:/root.txt)

\n'); + assert.strictEqual( + md.render('![test](data:image/svg;base64,)'), + '

![test](data:image/svg;base64,)

\n' + ); + + assert.strictEqual( + md.render('![test](data:image/vnd-something;base64,)'), + '

![test](data:image/vnd-something;base64,)

\n' + ); + + assert.strictEqual( + md.render('![test](data:text/javascript;base64,)'), + '

![test](data:text/javascript;base64,)

\n' + ); + + assert.strictEqual( + md.render('![test](vbscript:alert())'), + '

![test](vbscript:alert())

\n' + ); + + assert.strictEqual( + md.render('![test](javascript:alert())'), + '

![test](javascript:alert())

\n' + ); + + assert.strictEqual( + md.render('![test](file:/root.txt)'), + '

![test](file:/root.txt)

\n' + ); }); });