diff --git a/src/test/java/org/owasp/validator/html/test/AntiSamyTest.java b/src/test/java/org/owasp/validator/html/test/AntiSamyTest.java index 228d7087..6296686d 100644 --- a/src/test/java/org/owasp/validator/html/test/AntiSamyTest.java +++ b/src/test/java/org/owasp/validator/html/test/AntiSamyTest.java @@ -2599,4 +2599,26 @@ public void testSmuggledTagsInStyleContentCase2() throws ScanException, PolicyEx assertThat(as.scan(input, policy, AntiSamy.DOM).getCleanHTML(), not(containsString("mxss"))); assertThat(as.scan(input, policy, AntiSamy.SAX).getCleanHTML(), not(containsString("mxss"))); } + + @Test + public void testRawTextProcessingWhenPreservingComments() throws ScanException, PolicyException { + // Concern is that when preserving comments, certain tags would get their content badly parsed + // due to mutation XSS. + String[] payloads = { + "