示例#1
0
        public void TrapInjectableJavascript()
        {
            var url = "javascript: alert(1);void(​0));";

            Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url);

            url = " JAVASCRIPT : alert(1);void(​0));";
            Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url);

            url = "javascript:alert(1);void(​0);";
            Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url);

            url = "http://javascript.com/someurl";
            Assert.IsFalse(UrlUtility.InjectableJavascriptDetected(url), url);

            url = "https://preview.voat.co/v/test/comments/1088839/5419812";
            Assert.IsFalse(UrlUtility.InjectableJavascriptDetected(url), url);
        }