mirror of
https://github.com/discourse/discourse.git
synced 2025-05-22 06:41:25 +08:00
FIX: no-follow not handled correctly for sub domains
if a.com was whitelisted aa.com would pass through
This commit is contained in:
@ -69,10 +69,18 @@ describe PrettyText do
|
||||
expect(PrettyText.cook("<a href='#{Discourse.base_url.sub('http://', 'http://bla.')}/test.html'>cnn</a>") !~ /nofollow/).to eq(true)
|
||||
end
|
||||
|
||||
it "should inject nofollow in all non subdomain links" do
|
||||
expect(PrettyText.cook("<a href='#{Discourse.base_url.sub('http://', 'http://bla')}/test.html'>cnn</a>")).to match(/nofollow/)
|
||||
end
|
||||
|
||||
it "should not inject nofollow for foo.com" do
|
||||
expect(PrettyText.cook("<a href='http://foo.com/test.html'>cnn</a>") !~ /nofollow/).to eq(true)
|
||||
end
|
||||
|
||||
it "should inject nofollow for afoo.com" do
|
||||
expect(PrettyText.cook("<a href='http://afoo.com/test.html'>cnn</a>")).to match(/nofollow/)
|
||||
end
|
||||
|
||||
it "should not inject nofollow for bar.foo.com" do
|
||||
expect(PrettyText.cook("<a href='http://bar.foo.com/test.html'>cnn</a>") !~ /nofollow/).to eq(true)
|
||||
end
|
||||
|
Reference in New Issue
Block a user