Adds a test case for the sanitizer with an https iframe src.

RELNOTES: n/a PiperOrigin-RevId: 521460751 Change-Id: I3fb9a2e492374c96fbd6a35430f139f0f5e9da70
google · Apr 3, 2023 · ea2f538 · ea2f538
1 parent 5c8d860
commit ea2f538
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/closure/goog/html/sanitizer/html_test_vectors.js b/closure/goog/html/sanitizer/html_test_vectors.js
@@ -92,6 +92,13 @@ goog.html.htmlTestVectors.HTML_TEST_VECTORS = [
          "<iframe />",
      ],
      name: "iframe_src"},
+    {input: "<iframe src=\"https://evil.com\">",
+     acceptable: [
+         "",
+         "<iframe></iframe>",
+         "<iframe />",
+     ],
+     name: "iframe_src_https"},
     {input: "<iframe srcdoc=\"&lt;img src&equals;x:x onerror&equals;alert&lpar;xss&rpar;&gt;\" />",
      acceptable: [
          "",