oy-vey/src/utils/__tests__/CSS-test.js

React utilities for building server-side email templates.

import CSS from '../CSS';


describe('CSS', function() {
  it('should throw on unsafe css', function() {
    const shouldThrowBecauseOfMozBinding = () => {
      CSS.raiseOnUnsafeCSS(
        'body{-moz-binding: url("http://www.website.com/xss.xml#test")}'
      );
    };
    const shouldThrowBecauseOfExpression = () => {
      CSS.raiseOnUnsafeCSS(
        'body{xss:expr/*XSS*/ession(alert("XSS"))}'
      );
    };

    expect(shouldThrowBecauseOfMozBinding).toThrow();
    expect(shouldThrowBecauseOfExpression).toThrow();
  });
});