From 463db229285c9464d79af2b6c59acc7508b9fb26 Mon Sep 17 00:00:00 2001
From: Bianca Nenciu <nenciu.bianca@gmail.com>
Date: Wed, 26 Jun 2019 16:37:01 +0300
Subject: [PATCH] DEV: Add test.

Follow-up to bccd090cedd4f49b9a07958292baed462b8c1a1c.
---
 .../spec/components/pretty_text_spec.rb              | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/plugins/discourse-details/spec/components/pretty_text_spec.rb b/plugins/discourse-details/spec/components/pretty_text_spec.rb
index 946d56cf778..aa768305ecf 100644
--- a/plugins/discourse-details/spec/components/pretty_text_spec.rb
+++ b/plugins/discourse-details/spec/components/pretty_text_spec.rb
@@ -41,4 +41,16 @@ describe PrettyText do
     expect(md).to eq(html)
   end
 
+  it 'escapes summary text' do
+    md = PrettyText.cook(<<~EOF)
+      <script>alert('hello')</script>
+      [details="<script>alert('hello')</script>"]
+      <script>alert('hello')</script>
+      [/details]
+    EOF
+    md = PrettyText.format_for_email(md, post)
+
+    expect(md).not_to include('<script>')
+  end
+
 end