ArchiveBox/tests/test_title.py

from .fixtures import *

def test_title_is_htmlencoded_in_index_html(tmp_path, process, disable_extractors_dict):
    """
    https://github.com/pirate/ArchiveBox/issues/330
    Unencoded content should not be rendered as it facilitates xss injections
    and breaks the layout.
    """
    subprocess.run(['archivebox', 'add', 'http://localhost:8080/static/title_with_html.com.html'],
                                 capture_output=True, env=disable_extractors_dict)
    list_process = subprocess.run(["archivebox", "list", "--html"], capture_output=True)

    assert "<textarea>" not in list_process.stdout.decode("utf-8")