fix: update tests for reverse backslash

Co-authored-by: Iris Booker <iris.booker@getbraintree.com>
braintree · Jul 15, 2024 · a617083 · a617083
1 parent 3bbf710
commit a617083
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/__tests__/index.test.ts b/src/__tests__/index.test.ts
@@ -156,14 +156,19 @@ describe("sanitizeUrl", () => {
       "\rjavascript:alert()",
       "\u0000javascript:alert()",
       "\u0001javascript:alert()",
-      "\\j\\av\\a\\s\\cript:alert()",
     ];
 
     attackVectors.forEach((vector) => {
       expect(sanitizeUrl(vector)).toBe(BLANK_URL);
     });
   });
 
+  it("reverses backslashes", () => {
+    const attack = "\\j\\av\\a\\s\\cript:alert()";
+
+    expect(sanitizeUrl(attack)).toBe("/j/av/a/s/cript:alert()");
+  });
+
   describe("invalid protocols", () => {
     describe.each(["javascript", "data", "vbscript"])("%s", (protocol) => {
       it(`replaces ${protocol} urls with ${BLANK_URL}`, () => {