[ticket/11768] Added support for creating unsafe BBCodes

PHPBB3-11768

1 files changed, 15 insertions, 3 deletions

diff --git a/tests/text_formatter/s9e/factory_test.php b/tests/text_formatter/s9e/factory_test.php
index a1378514b4..8df841605d 100644
--- a/tests/text_formatter/s9e/factory_test.php
+++ b/tests/text_formatter/s9e/factory_test.php
@@ -78,9 +78,6 @@ class phpbb_textformatter_s9e_factory_test extends phpbb_database_test_case
 		// This custom BBCode should be set
 		$this->assertTrue(isset($configurator->BBCodes['CUSTOM']));
 
-		// This unsafe custom BBCode will trigger an exception and should be ignored
-		$this->assertFalse(isset($configurator->BBCodes['UNSAFE']));
-
 		$this->assertTrue(isset($configurator->Emoticons[':D']));
 	}
 
@@ -176,4 +173,19 @@ class phpbb_textformatter_s9e_factory_test extends phpbb_database_test_case
 		$expected = $original;
 		$this->assertSame($expected, $renderer->render($parser->parse($original)));
 	}
+
+	/**
+	* @testdox Accepts unsafe custom BBCodes
+	*/
+	public function test_unsafe_bbcode()
+	{
+		$fixture = __DIR__ . '/fixtures/unsafe_bbcode.xml';
+		$container = $this->get_test_case_helpers()->set_s9e_services(null, $fixture);
+		$parser = $container->get('text_formatter.parser');
+		$renderer = $container->get('text_formatter.renderer');
+
+		$original = '[xss=javascript:alert(1)]text[/xss]';
+		$expected = '<a href="javascript:alert(1)">text</a>';
+		$this->assertSame($expected, $renderer->render($parser->parse($original)));
+	}
 }