From c912d6d248aa0276eef192f23c997591e0e619b7 Mon Sep 17 00:00:00 2001
From: Ben Ubois <ben@benubois.com>
Date: Wed, 10 Apr 2013 07:53:59 -0700
Subject: [PATCH] Strip contents of <script> tags. Fixes feedbin/support#49.

---
 lib/html/pipeline/sanitization_filter.rb       | 1 +
 test/html/pipeline/sanitization_filter_test.rb | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/lib/html/pipeline/sanitization_filter.rb b/lib/html/pipeline/sanitization_filter.rb
index 76961156..e804b533 100644
--- a/lib/html/pipeline/sanitization_filter.rb
+++ b/lib/html/pipeline/sanitization_filter.rb
@@ -35,6 +35,7 @@ class SanitizationFilter < Filter
           div ins del sup sub p ol ul table blockquote dl dt dd
           kbd q samp var hr ruby rt rp li tr td th
         ),
+        :remove_contents => ['script'],
         :attributes => {
           'a' => ['href'],
           'img' => ['src'],
diff --git a/test/html/pipeline/sanitization_filter_test.rb b/test/html/pipeline/sanitization_filter_test.rb
index 4af85c37..45d34d96 100644
--- a/test/html/pipeline/sanitization_filter_test.rb
+++ b/test/html/pipeline/sanitization_filter_test.rb
@@ -44,4 +44,9 @@ def test_github_specific_protocols_are_not_removed
     stuff = '<a href="github-windows://spillthelog">Spill this yo</a> and so on'
     assert_equal stuff, SanitizationFilter.call(stuff).to_s
   end
+
+  def test_script_contents_are_removed
+    orig = '<script>JavaScript!</script>'
+    assert_equal "", SanitizationFilter.call(orig).to_s
+  end
 end