Add tests for sanitizer.

textile/tests/__init__.py

@@ -2,7 +2,7 @@
 import textile
 import re
 from nose.tools import eq_, assert_true
-
+from nose.plugins.skip import SkipTest
 
 """
 ('>>> import textile')
@@ -367,3 +367,25 @@ def testPre(self):
         expect = textile.textile(test)
 
         eq_(result, expect)
+
+    def testSanitize(self):
+        try:
+            import html5lib
+        except ImportError:
+            raise SkipTest()
+
+        test = "a paragraph of benign text"
+        result = "\t<p>a paragraph of benign text</p>"
+        expect = textile.Textile().textile(test, sanitize=True)
+        eq_(result, expect)
+
+        test = """<p style="width: expression(alert('evil'));">a paragraph of evil text</p>"""
+        result = '<p style="">a paragraph of evil text</p>'
+        expect = textile.Textile().textile(test, sanitize=True)
+        eq_(result, expect)
+
+        test = """<p>a paragraph of benign text<br />and more text</p>"""
+        result = '<p>a paragraph of benign text<br>and more text</p>'
+        expect = textile.Textile().textile(test, sanitize=True,
+                                           html_type='html')
+        eq_(result, expect)