From a418fa95b962d77a614a0cbf66626123db4fc87f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <mcihar@suse.cz>
Date: Mon, 25 Jul 2011 14:13:03 +0200
Subject: [PATCH] Add testcase for combined link and XSS attempt

---
 test/libraries/PMA_sanitize_test.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/test/libraries/PMA_sanitize_test.php b/test/libraries/PMA_sanitize_test.php
index a844854a16..d88a82c318 100644
--- a/test/libraries/PMA_sanitize_test.php
+++ b/test/libraries/PMA_sanitize_test.php
@@ -33,6 +33,12 @@ class PMA_sanitize_test extends PHPUnit_Framework_TestCase
             PMA_sanitize('[a@./Documentation.html]doc[/a]'));
     }
 
+    public function testLinkAndXssInHref()
+    {
+        $this->assertEquals('<a href="./Documentation.html">doc</a>[a@javascript:alert(\'XSS\');@target]link</a>',
+            PMA_sanitize('[a@./Documentation.html]doc[/a][a@javascript:alert(\'XSS\');@target]link[/a]'));
+    }
+
     public function testHtmlTags()
     {
         $this->assertEquals('&lt;div onclick=""&gt;',