This repository was archived by the owner on Apr 12, 2024. It is now read-only.
File tree 1 file changed +4
-3
lines changed
1 file changed +4
-3
lines changed Original file line number Diff line number Diff line change @@ -274,13 +274,14 @@ describe('HTML', function() {
274
274
275
275
it ( 'should not accept SVG animation tags' , function ( ) {
276
276
expectHTML ( '<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><text y="1em">Click me</text><animate attributeName="xlink:href" values="javascript:alert(1)"/></a></svg>' )
277
- . toEqual ( '<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><text y="1em">Click me</text></a></svg>' ,
278
- '<svg xmlns="http://www.w3.org/2000/svg"><a><text y="1em">Click me</text></a></svg>' ) ;
277
+ . toBeOneOf ( '<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><text y="1em">Click me</text></a></svg>' ,
278
+ '<svg xmlns="http://www.w3.org/2000/svg"><a><text y="1em">Click me</text></a></svg>' ) ;
279
279
280
280
expectHTML ( '<svg><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"><circle r="400"></circle>' +
281
281
'<animate attributeName="xlink:href" begin="0" from="javascript:alert(1)" to="&" /></a></svg>' )
282
282
. toBeOneOf ( '<svg><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"><circle r="400"></circle></a></svg>' ,
283
- '<svg><a xlink:href="?" xmlns:xlink="http://www.w3.org/1999/xlink"><circle r="400"></circle></a></svg>' ) ;
283
+ '<svg><a xlink:href="?" xmlns:xlink="http://www.w3.org/1999/xlink"><circle r="400"></circle></a></svg>' ,
284
+ '<svg xmlns="http://www.w3.org/2000/svg"><a xlink:href="?" xmlns:xlink="http://www.w3.org/1999/xlink"><circle r="400"></circle></a></svg>' ) ;
284
285
} ) ;
285
286
} ) ;
286
287
You can’t perform that action at this time.
0 commit comments