OWASP / java-html-sanitizer / 292

93%

master: 94%

push

travis-ci

Do not lcase element or attribute names that match SVG or MathML name… (#206)

* Do not lcase element or attribute names that match SVG or MathML names exactly

> Currently all names are converted to lowercase which is ok when
> you're using it for HTML only, but if there is an SVG image nested
> inside the HTML it breaks.  For example, when `viewBox` attribute is
> converted to `viewbox` the image is not displayed correctly.

This commit splits *HtmlLexer*.*canonicalName* into variants which preserve
items on whitelists derived from the SVG and MathML specifications, and
adjusts callers of *canonicalName* to use the appropriate variant.

Fixes #182

* add unittests for mixed-case SVG names

29 of 29 new or added lines in 6 files covered. (100.0%)

3898 of 4184 relevant lines covered (93.16%)

2.79 hits per line