| | |
|---|
| | | $this->assertNotRegExp('/<form [^>]+>/', $html, "No form tags allowed"); |
|---|
| | | $this->assertRegExp('/Subscription form/', $html, "Include <form> contents"); |
|---|
| | | $this->assertRegExp('/<!-- link ignored -->/', $html, "No external links allowed"); |
|---|
| | | $this->assertRegExp('/<a[^>]+ target="_blank">/', $html, "Set target to _blank"); |
|---|
| | | $this->assertRegExp('/<a[^>]+ target="_blank"/', $html, "Set target to _blank"); |
|---|
| | | $this->assertTrue($GLOBALS['REMOTE_OBJECTS'], "Remote object detected"); |
|---|
| | | |
|---|
| | | // render HTML in safe mode |
|---|
| | |
|---|
| | | $html = rcmail_print_body($part, array('safe' => true)); |
|---|
| | | |
|---|
| | | $this->assertRegExp('/<a href="mailto:nobody@roundcube.net" onclick="return rcmail.command\(\'compose\',\'nobody@roundcube.net\',this\)">nobody@roundcube.net<\/a>/', $html, "Mailto links with onclick"); |
|---|
| | | $this->assertRegExp('#<a href="http://www.apple.com/legal/privacy" target="_blank">http://www.apple.com/legal/privacy</a>#', $html, "Links with target=_blank"); |
|---|
| | | $this->assertRegExp('#\\[<a href="http://example.com/\\?tx\\[a\\]=5" target="_blank">http://example.com/\\?tx\\[a\\]=5</a>\\]#', $html, "Links with square brackets"); |
|---|
| | | $this->assertRegExp('#<a rel="noreferrer" target="_blank" href="http://www.apple.com/legal/privacy">http://www.apple.com/legal/privacy</a>#', $html, "Links with target=_blank"); |
|---|
| | | $this->assertRegExp('#\\[<a rel="noreferrer" target="_blank" href="http://example.com/\\?tx\\[a\\]=5">http://example.com/\\?tx\\[a\\]=5</a>\\]#', $html, "Links with square brackets"); |
|---|
| | | } |
|---|
| | | |
|---|
| | | /** |
|---|
| | |
|---|
| | | $html = rcmail_html4inline(rcmail_print_body($part, array('safe' => false)), 'foo'); |
|---|
| | | |
|---|
| | | $mailto = '<a href="mailto:me@me.com?subject=this is the subject&body=this is the body"' |
|---|
| | | .' onclick="return rcmail.command(\'compose\',\'me@me.com?subject=this is the subject&body=this is the body\',this)">e-mail</a>'; |
|---|
| | | .' onclick="return rcmail.command(\'compose\',\'me@me.com?subject=this is the subject&body=this is the body\',this)" rel="noreferrer">e-mail</a>'; |
|---|
| | | |
|---|
| | | $this->assertRegExp('|'.preg_quote($mailto, '|').'|', $html, "Extended mailto links"); |
|---|
| | | } |
|---|
