#!/usr/bin/env perl

use warnings;
use strict;

use Test::More;
use HTML::Restrict ();

my $hr = HTML::Restrict->new;
$hr->debug(0);
$hr->set_rules( { a => [ 'href', 'class' ] } );

my $text = q{<a href="javascript:alert(1)">oops!</a>};

my $clean = $hr->process($text);
is $clean, '<a>oops!</a>', 'bad scheme removed';

is $hr->process(q{<a href="javascript&#58;evil_script()">evil</a>}),
    '<a>evil</a>', 'bad scheme removed';

foreach my $uri (
    'http://vilerichard.com', 'https://vilerichard.com',
    '//vilerichard.com',      '/music'
) {
    my $img = qq[<a href="$uri">click</a>];
    is $hr->process($img), $img, 'good uri scheme preserved';
}

is $hr->process(
    q{<a class="&quot;&gt;&lt;script&gt;alert(&quot;oops&quot;);&lt;/script&gt;&lt;a href=&quot;"></a>}
    ),
    q{<a class="&quot;&gt;&lt;script&gt;alert(&quot;oops&quot;);&lt;/script&gt;&lt;a href=&quot;"></a>},
    'attribute value filtered';

done_testing();