rfeedparser_ictv 0.9.931

data/tests/illformed/sanitize/item_content_encoded_onkeypress.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onkeypress
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onkeypress="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onkeyup.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onkeyup
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onkeyup="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onload.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onload
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onload="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onmousedown.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onmousedown
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmousedown="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onmouseout.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onmouseout
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseout="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onmouseover.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onmouseover
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseover="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onmouseup.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onmouseup
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseup="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onreset.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onreset
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onreset="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onresize.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onresize
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onresize="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onsubmit.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onsubmit
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onsubmit="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_onunload.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains onunload
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onunload="location.href='http://www.ragingplatypus.com/';" /></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_script.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains script
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>safe&lt;script type="text/javascript">location.href='http:/'+'/example.com/';&lt;/script> description</content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_script_cdata.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains script
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded><![CDATA[safe<script type="text/javascript">location.href='http:/'+'/example.com/';</script> description]]></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_script_map_content.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains script (maps to content)
+Expect:      bozo and entries[0]['content'][0]['value'] == u'safe description'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>safe&lt;script type="text/javascript">location.href='http:/'+'/example.com/';&lt;/script> description</content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_content_encoded_style.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item content:encoded contains style
+Expect:      bozo and entries[0]['description'] == u'<a href="http://www.ragingplatypus.com/">never trust your upstream platypus</a>'
+-->
+<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
+<channel>
+<item>
+<content:encoded>&lt;a href="http://www.ragingplatypus.com/" style="display:block; position:absolute; left:0; top:0; width:100%; height:100%; z-index:1; background-color:black; background-image:url(http://www.ragingplatypus.com/i/cam-full.jpg); background-x:center; background-y:center; background-repeat:repeat;">never trust your upstream platypus&lt;/a></content:encoded>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_applet.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains applet
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;applet code="foo.class" codebase="http://example.com/">&lt;/applet> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_blink.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains blink
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;blink>safe&lt;/blink> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_crazy.xml

@@ -0,0 +1,81 @@
+<!--
+Description: item description is crazy
+Expect:      bozo and entries[0]['description'] == u'Crazy HTML -' + '- Can Your Regex Parse This?\n\n\n\n<!-' + '- <script> -' + '->\n\n<!-' + '- \n\t<script> \n-' + '->\n\n\n\nfunction executeMe()\n{\n\n\n\n\n/* \n<h1>Did The Javascript Execute?</h1>\n<div>\nI will execute here, too, if you mouse over me\n</div>'
+-->
+<rss version="2.0">
+<channel>
+<title>Crazy RSS</title>
+<description>Contains unsafe script</description>
+<link>http://crazy.example.com/</link>
+<language>en</language>
+<item>
+<description>
+&lt;!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+
+&lt;html xmlns="http://www.w3.org/1999/xhtml">
+&lt;head>
+&lt;title>Crazy HTML -- Can Your Regex Parse This?&lt;/title>
+
+&lt;/head>
+&lt;body    notRealAttribute="value"onload="executeMe();"foo="bar"
+
+>
+&lt;!-- &lt;script> -->
+
+&lt;!-- 
+	&lt;script> 
+-->
+
+&lt;/script>
+
+
+&lt;script
+
+
+>
+
+function executeMe()
+{
+
+
+
+
+/* &lt;script> 
+function am_i_javascript()
+{
+	var str = "Some innocuously commented out stuff";
+}
+&lt; /script>
+*/
+
+	
+	
+	
+	
+	
+	
+	
+	
+	alert("Executed");
+}
+
+                                   &lt;/script
+
+
+
+>
+&lt;h1>Did The Javascript Execute?&lt;/h1>
+&lt;div notRealAttribute="value
+"onmouseover="
+executeMe();
+"foo="bar">
+I will execute here, too, if you mouse over me
+&lt;/div>
+
+&lt;/body>
+
+&lt;/html>
+</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_embed.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains embed
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;embed src="http://example.com/"> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_frame.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains frame
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;frameset rows="*">&lt;frame src="http://example.com/">&lt;/frameset> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_iframe.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains iframe
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;iframe src="http://example.com/"/> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_link.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains link
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;link rel="stylesheet" type="text/css" href="http://example.com/evil.css"> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_meta.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains meta
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;meta http-equiv="Refresh" content="0; URL=http://example.com/"> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_object.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains object
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;object classid="clsid:C932BA85-4374-101B-A56C-00AA003668DC"> description</description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onabort.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onabort
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onabort="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onblur.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onblur
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onblur="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onchange.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onchange
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onchange="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onclick.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onclick
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onclick="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_ondblclick.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains ondblclick
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" ondblclick="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onerror.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onerror
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onerror="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onfocus.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onfocus
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onfocus="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onkeydown.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onkeydown
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onkeydown="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onkeypress.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onkeypress
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onkeypress="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onkeyup.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onkeyup
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onkeyup="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onload.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onload
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onload="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onmousedown.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onmousedown
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmousedown="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onmouseout.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onmouseout
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseout="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onmouseover.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onmouseover
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseover="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onmouseup.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onmouseup
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onmouseup="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onreset.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onreset
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onreset="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onresize.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onresize
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onresize="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onsubmit.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onsubmit
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onsubmit="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_onunload.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains onunload
+Expect:      bozo and entries[0]['description'] == u'<img src="http://www.ragingplatypus.com/i/cam-full.jpg" />'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>&lt;img src="http://www.ragingplatypus.com/i/cam-full.jpg" onunload="location.href='http://www.ragingplatypus.com/';" /></description>
+</item>
+</channel>
+</rss

data/tests/illformed/sanitize/item_description_script.xml

@@ -0,0 +1,11 @@
+<!--
+Description: item description contains script
+Expect:      bozo and entries[0]['description'] == u'safe description'
+-->
+<rss version="2.0">
+<channel>
+<item>
+<description>safe&lt;script type="text/javascript">location.href='http:/'+'/example.com/';&lt;/script> description</description>
+</item>
+</channel>
+</rss