X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=blobdiff_plain;f=xt%2Ftt.t;h=573c141bf469ff3544a17dd4077ea9274ee40631;hb=10c4bc68b3d7aa623b7f87c5366afe0b53cd871d;hp=b8c16e42e4fed4e7a44e1d60ea269c1aaa6de6b9;hpb=f49292d9c720aace6fb382ae7fc2e3056b9e6357;p=scpubgit%2FHTML-String.git

diff --git a/xt/tt.t b/xt/tt.t
index b8c16e4..573c141 100644
--- a/xt/tt.t
+++ b/xt/tt.t
@@ -23,4 +23,27 @@ is(
     '<tag>Hi &lt;bob&gt;</tag>',
 );
 
+is(
+    do_tt('<tag>[% foo | no_escape %]</tag>', { foo => 'Hi <bob>' }),
+    '<tag>Hi <bob></tag>',
+);
+
+# Check we aren't nailed by https://rt.perl.org/rt3/Ticket/Display.html?id=49594
+
+is(
+    do_tt('<foo>"$bar"</foo>'."\n"),
+    '<foo>"$bar"</foo>'."\n"
+);
+
+is(
+    do_tt(
+        '[% FOREACH item IN items %][% item %][% END %]',
+        { items => [ '<script>alert("lalala")</script>', '-> & so "on" <-' ] }
+    ),
+    '&lt;script&gt;alert(&quot;lalala&quot;)&lt;/script&gt;'          
+        .'-&gt; &amp; so &quot;on&quot; &lt;-'
+);
+
+is( do_tt('"0"', {}), '"0"' );
+
 done_testing;