2018-03-25 16:15:39 +00:00
|
|
|
# License: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later
|
2018-03-25 17:30:42 +00:00
|
|
|
require 'rails_helper'
|
|
|
|
|
|
|
|
|
|
describe ActiveSupport::JSON::Encoding do
|
|
|
|
|
it 'test_hash_keys_encoding' do
|
|
|
|
|
#from https://groups.google.com/forum/message/raw?msg=rubyonrails-security/7VlB_pck3hU/3QZrGIaQW6cJ
|
|
|
|
|
begin
|
|
|
|
|
ActiveSupport.escape_html_entities_in_json = true
|
|
|
|
|
expect(ActiveSupport::JSON.encode("<>" => "<>").downcase).to eq "{\"\\u003c\\u003e\":\"\\u003c\\u003e\"}"
|
|
|
|
|
ensure
|
|
|
|
|
ActiveSupport.escape_html_entities_in_json = false
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
end
|
