import { describe, it, expect } from 'vitest';
import { sanitizeSvg } from '../../lib/icons/sanitize.js';
describe('sanitizeSvg', () => {
it('strips ');
expect(out).not.toMatch(/script/i);
expect(out).toMatch(/ {
const out = sanitizeSvg('');
expect(out).not.toMatch(/onload|onclick/i);
});
it('strips unquoted on* handlers', () => {
const out = sanitizeSvg('');
expect(out).not.toMatch(/onload|onclick/i);
});
it('neutralizes javascript: hrefs', () => {
const out = sanitizeSvg('');
expect(out).not.toMatch(/javascript:/i);
});
it('drops ', () => {
const out = sanitizeSvg('');
expect(out).not.toMatch(/foreignObject/i);
});
it('accepts a Buffer', () => {
expect(sanitizeSvg(Buffer.from(''))).toMatch(/