From a067353affa63b01520290967b76dcc124f28cc1 Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@libreserver.org>
Date: Wed, 26 Oct 2022 14:40:03 +0100
Subject: [PATCH] Test for html containing php script

---
 tests.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tests.py b/tests.py
index 7f4fb1449..5f0251a5e 100644
--- a/tests.py
+++ b/tests.py
@@ -4107,6 +4107,10 @@ def _test_danger_markup():
         '.innerHTML = "def";</script></p>'
     assert dangerous_markup(content, allow_local_network_access)
 
+    content = '<p>This html contains more than you expected... ' + \
+        '<?php $server_output = curl_exec($ch); ?></p>'
+    assert dangerous_markup(content, allow_local_network_access)
+
     content = '<p>This is a valid-looking message. But wait... ' + \
         '<script src="https://evilsite/payload.js" /></p>'
     assert dangerous_markup(content, allow_local_network_access)