Gecko [ www.blackthorn-inc.com ]

Name	Size	Permission	Date
Dump.t	221 B	-r--r--r--	2014-12-27 11:49
apache.t	164 B	-r--r--r--	2014-12-27 11:49
autoescape.t	6.13 KB	-r--r--r--	2014-12-27 11:49
can.t	112 B	-r--r--r--	2014-12-27 11:49
carp.t	11.04 KB	-r--r--r--	2014-12-27 11:49
charset.t	722 B	-r--r--r--	2014-12-27 11:49
checkbox_group.t	992 B	-r--r--r--	2014-12-27 11:49
cookie.t	15.64 KB	-r--r--r--	2014-12-27 11:49
delete.t	2.08 KB	-r--r--r--	2014-12-27 11:49
end_form.t	188 B	-r--r--r--	2014-12-27 11:49
form.t	8.83 KB	-r--r--r--	2014-12-27 11:49
function.t	4.79 KB	-r--r--r--	2014-12-27 11:49
headers.t	1.94 KB	-r--r--r--	2014-12-27 11:49
hidden.t	2.14 KB	-r--r--r--	2014-12-27 11:49
html.t	4.75 KB	-r--r--r--	2014-12-27 11:49
http.t	1.44 KB	-r--r--r--	2014-12-27 11:49
init.t	227 B	-r--r--r--	2014-12-27 11:49
init_test.txt	12 B	-r--r--r--	2014-12-27 11:49
multipart_init.t	741 B	-r--r--r--	2014-12-27 11:49
no_tabindex.t	4.08 KB	-r--r--r--	2014-12-27 11:49
param_fetch.t	838 B	-r--r--r--	2014-12-27 11:49
popup_menu.t	627 B	-r--r--r--	2014-12-27 11:49
pretty.t	2.12 KB	-r--r--r--	2014-12-27 11:49
push.t	2.04 KB	-r--r--r--	2014-12-27 11:49
query_string.t	308 B	-r--r--r--	2014-12-27 11:49
request.t	4.02 KB	-r--r--r--	2014-12-27 11:49
rt-52469.t	184 B	-r--r--r--	2014-12-27 11:49
save_read_roundtrip.t	583 B	-r--r--r--	2014-12-27 11:49
start_end_asterisk.t	2.86 KB	-r--r--r--	2014-12-27 11:49
start_end_end.t	2.91 KB	-r--r--r--	2014-12-27 11:49
start_end_start.t	2.94 KB	-r--r--r--	2014-12-27 11:49
switch.t	164 B	-r--r--r--	2014-12-27 11:49
tmpdir.t	1.25 KB	-r--r--r--	2014-12-27 11:49
unescapeHTML.t	875 B	-r--r--r--	2014-12-27 11:49
upload.t	4.69 KB	-r--r--r--	2014-12-27 11:49
uploadInfo.t	2.52 KB	-r--r--r--	2014-12-27 11:49
upload_post_text.txt	3.21 KB	-r--r--r--	2014-12-27 11:49
url.t	3.71 KB	-r--r--r--	2014-12-27 11:49
user_agent.t	362 B	-r--r--r--	2014-12-27 11:49
utf8.t	721 B	-r--r--r--	2014-12-27 11:49
util-58.t	1.03 KB	-r--r--r--	2014-12-27 11:49
util.t	1.22 KB	-r--r--r--	2014-12-27 11:49

Rename

#!perl

use strict;
use warnings;

use Test::More tests => 18;

use CGI qw/ autoEscape escapeHTML button textfield password_field textarea popup_menu scrolling_list checkbox_group optgroup checkbox radio_group submit image_button button /;
$CGI::Util::SORT_ATTRIBUTES = 1;

is (button(-name => 'test<'), '<input type="button"  name="test&lt;" value="test&lt;" />', "autoEscape defaults to On");

my $before = escapeHTML("test<");
autoEscape(undef);
my $after = escapeHTML("test<");

is($before, "test&lt;", "reality check escapeHTML");

is ($before, $after, "passing undef to autoEscape doesn't break escapeHTML"); 
is (button(-name => 'test<'), '<input type="button"  name="test<" value="test<" />', "turning off autoescape actually works");
autoEscape(1);
is (button(-name => 'test<'), '<input type="button"  name="test&lt;" value="test&lt;" />', "autoescape turns back on");
$before = escapeHTML("test<");
autoEscape(0);
$after = escapeHTML("test<");

is ($before, $after, "passing 0 to autoEscape doesn't break escapeHTML");

# RT #25485: Needs Tests: autoEscape() bypassed for Javascript handlers, except in button()
autoEscape(undef);
 
is(textfield(
{
default => 'text field',
onclick => 'alert("===> text field")',
},
),
qq{<input type="text" name="" value="text field" onclick="alert("===> text field")" />},
'autoescape javascript turns off for textfield'
);

is(password_field(
{
default => 'password field',
onclick => 'alert("===> password
field")',
},
),
qq{<input type="password" name="" value="password field" onclick="alert("===> password
field")" />},
'autoescape javascript turns off for password field'
);

is(textarea(
{
name => 'foo',
default => 'text area',
rows => 10,
columns => 50,
onclick => 'alert("===> text area")',
},
),
qq{<textarea name="foo"  rows="10" cols="50" onclick="alert("===> text area")">text area</textarea>},
'autoescape javascript turns off for textarea'
);

is(popup_menu(
{
name => 'menu_name',
values => ['eenie','meenie','minie'],
default => 'meenie',
onclick => 'alert("===> popup menu")',
}
),
qq{<select name="menu_name"  onclick="alert("===> popup menu")">
<option value="eenie">eenie</option>
<option selected="selected" value="meenie">meenie</option>
<option value="minie">minie</option>
</select>},
'autoescape javascript turns off for popup_menu'
);

is(popup_menu(
-name=>'menu_name',
onclick => 'alert("===> menu group")',
-values=>[
qw/eenie meenie minie/,
optgroup(
-name=>'optgroup_name',
onclick =>
'alert("===> menu group option")',
-values => ['moe','catch'],
-attributes=>{'catch'=>{'class'=>'red'}}
)
],
-labels=>{
'eenie'=>'one',
'meenie'=>'two',
'minie'=>'three'
},
-default=>'meenie'
),
qq{<select name="menu_name"  onclick="alert("===> menu group")">
<option value="eenie">one</option>
<option selected="selected" value="meenie">two</option>
<option value="minie">three</option>
<optgroup label="optgroup_name" onclick="alert("===> menu group option")">
<option value="moe">moe</option>
<option class="red" value="catch">catch</option>
</optgroup>
</select>},
'autoescape javascript turns off for popup_menu #2'
);

is(scrolling_list(
-name=>'list_name',
onclick => 'alert("===> scrolling
list")',
-values=>['eenie','meenie','minie','moe'],
-default=>['eenie','moe'],
-size=>5,
-multiple=>'true',
),
qq{<select name="list_name"  size="5" multiple="multiple" onclick="alert("===> scrolling
list")">
<option selected="selected" value="eenie">eenie</option>
<option value="meenie">meenie</option>
<option value="minie">minie</option>
<option selected="selected" value="moe">moe</option>
</select>},
'autoescape javascript turns off for scrolling list'
);

is(checkbox_group(
-name=>'group_name',
onclick => 'alert("===> checkbox group")',
-values=>['eenie','meenie','minie','moe'],
-default=>['eenie','moe'],
-linebreak=>'true',
),
qq{<label><input type="checkbox" name="group_name" value="eenie" checked="checked" onclick="alert("===> checkbox group")" />eenie</label><br /> <label><input type="checkbox" name="group_name" value="meenie" onclick="alert("===> checkbox group")" />meenie</label><br /> <label><input type="checkbox" name="group_name" value="minie" onclick="alert("===> checkbox group")" />minie</label><br /> <label><input type="checkbox" name="group_name" value="moe" checked="checked" onclick="alert("===> checkbox group")" />moe</label><br />},
'autoescape javascript turns off for checkbox group'
);

is(checkbox(
-name=>'checkbox_name',
onclick => 'alert("===> single checkbox")',
onchange => 'alert("===> single checkbox
changed")',
-checked=>1,
-value=>'ON',
-label=>'CLICK ME'
),
qq{<label><input type="checkbox" name="checkbox_name" value="ON" checked="checked" onchange="alert("===> single checkbox
changed")" onclick="alert("===> single checkbox")" />CLICK ME</label>},
'autoescape javascript turns off for checkbox'
);

is(radio_group(
{
name=>'group_name',
onclick => 'alert("===> radio group")',
values=>['eenie','meenie','minie','moe'],
rows=>2,
columns=>2,
}
),
qq{<table><tr><td><label><input type="radio" name="group_name" value="eenie" checked="checked" onclick="alert("===> radio group")" />eenie</label></td><td><label><input type="radio" name="group_name" value="minie" onclick="alert("===> radio group")" />minie</label></td></tr><tr><td><label><input type="radio" name="group_name" value="meenie" onclick="alert("===> radio group")" />meenie</label></td><td><label><input type="radio" name="group_name" value="moe" onclick="alert("===> radio group")" />moe</label></td></tr></table>},
'autoescape javascript turns off for radio group'
);

is(submit(
-name=>'button_name',
onclick => 'alert("===> submit button")',
-value=>'value'
),
qq{<input type="submit" name="button_name" value="value" onclick="alert("===> submit button")" />},
'autoescape javascript turns off for submit'
);

is(image_button(
-name=>'button_name',
onclick => 'alert("===> image button")',
-src=>'/source/URL',
-align=>'MIDDLE'
),
qq{<input type="image" name="button_name" src="/source/URL" align="middle" onclick="alert("===> image button")" />},
'autoescape javascript turns off for image_button'
);

is(button(
{
onclick => 'alert("===> Button")',
title => 'Button',
},
),
qq{<input type="button"  onclick="alert("===> Button")" title="Button" />},
'autoescape javascript turns off for button'
);