aboutsummaryrefslogtreecommitdiffstats
path: root/test/ng/directive/ngBindSpec.js
diff options
context:
space:
mode:
Diffstat (limited to 'test/ng/directive/ngBindSpec.js')
-rw-r--r--test/ng/directive/ngBindSpec.js41
1 files changed, 22 insertions, 19 deletions
diff --git a/test/ng/directive/ngBindSpec.js b/test/ng/directive/ngBindSpec.js
index 1d8f8ef4..be68464f 100644
--- a/test/ng/directive/ngBindSpec.js
+++ b/test/ng/directive/ngBindSpec.js
@@ -67,19 +67,14 @@ describe('ngBind*', function() {
});
- describe('ngBindHtmlUnsafe', function() {
-
- function configureSce(enabled) {
- module(function($provide, $sceProvider) {
- $sceProvider.enabled(enabled);
- });
- };
-
+ describe('ngBindHtml', function() {
describe('SCE disabled', function() {
- beforeEach(function() {configureSce(false)});
+ beforeEach(function() {
+ module(function($sceProvider) { $sceProvider.enabled(false); });
+ });
- it('should set unsafe html', inject(function($rootScope, $compile) {
- element = $compile('<div ng-bind-html-unsafe="html"></div>')($rootScope);
+ it('should set html', inject(function($rootScope, $compile) {
+ element = $compile('<div ng-bind-html="html"></div>')($rootScope);
$rootScope.html = '<div onclick="">hello</div>';
$rootScope.$digest();
expect(angular.lowercase(element.html())).toEqual('<div onclick="">hello</div>');
@@ -88,27 +83,35 @@ describe('ngBind*', function() {
describe('SCE enabled', function() {
- beforeEach(function() {configureSce(true)});
-
- it('should NOT set unsafe html for untrusted values', inject(function($rootScope, $compile) {
- element = $compile('<div ng-bind-html-unsafe="html"></div>')($rootScope);
+ it('should NOT set html for untrusted values', inject(function($rootScope, $compile) {
+ element = $compile('<div ng-bind-html="html"></div>')($rootScope);
$rootScope.html = '<div onclick="">hello</div>';
expect($rootScope.$digest).toThrow();
}));
- it('should NOT set unsafe html for wrongly typed values', inject(function($rootScope, $compile, $sce) {
- element = $compile('<div ng-bind-html-unsafe="html"></div>')($rootScope);
+ it('should NOT set html for wrongly typed values', inject(function($rootScope, $compile, $sce) {
+ element = $compile('<div ng-bind-html="html"></div>')($rootScope);
$rootScope.html = $sce.trustAsCss('<div onclick="">hello</div>');
expect($rootScope.$digest).toThrow();
}));
- it('should set unsafe html for trusted values', inject(function($rootScope, $compile, $sce) {
- element = $compile('<div ng-bind-html-unsafe="html"></div>')($rootScope);
+ it('should set html for trusted values', inject(function($rootScope, $compile, $sce) {
+ element = $compile('<div ng-bind-html="html"></div>')($rootScope);
$rootScope.html = $sce.trustAsHtml('<div onclick="">hello</div>');
$rootScope.$digest();
expect(angular.lowercase(element.html())).toEqual('<div onclick="">hello</div>');
}));
+ describe('when $sanitize is available', function() {
+ beforeEach(function() { module('ngSanitize'); });
+
+ it('should sanitize untrusted html', inject(function($rootScope, $compile) {
+ element = $compile('<div ng-bind-html="html"></div>')($rootScope);
+ $rootScope.html = '<div onclick="">hello</div>';
+ $rootScope.$digest();
+ expect(angular.lowercase(element.html())).toEqual('<div>hello</div>');
+ }));
+ });
});
});