encodehtml/test/index.js

escaping and unescaping HTML entities – commonly needed utils to prevent XSS attacks when rendering user generated content

var should = require('chai').should(),
	encodehtml = require('../index'),
	escape = encodehtml.escape,
	unescape = encodehtml.unescape;

describe('#escape', function(){
	
	it('converts & into &', function(){
		escape('&').should.equal('&');
	});

	it('converts " into "', function() {
		escape('"').should.equal('"');
	});

	it('converts \' into '', function() {
		escape('\'').should.equal(''');
	});

	it('converts < into &lt;', function() {
		escape('<').should.equal('&lt;');
	});

	it('converts > into &gt;', function() {
		escape('>').should.equal('&gt;');
	});

});

describe('#unescape', function(){
	
	it('converts &amp; into &', function() {
		unescape('&amp;').should.equal('&');
	});

	it('converts &quot; into "', function() {
		unescape('&quot;').should.equal('"');
	});

	it('converts &#39; into \'', function() {
		unescape('&#39;').should.equal('\'');
	});

	it('converts &lt; into <', function() {
		unescape('&lt;').should.equal('<');
	});

	it('converts &gt; into >', function() {
		unescape('&gt;').should.equal('>');
	});

});