From 4a600467192cc3e77b36f5b8b87290a1e782ce53 Mon Sep 17 00:00:00 2001
From: Skye Im <skye.im@nyu.edu>
Date: Fri, 21 Dec 2018 17:43:18 -0500
Subject: [PATCH] =?UTF-8?q?=F0=9F=92=A1=20Contrib=20limited=20html=20rende?=
 =?UTF-8?q?rer=20(#74)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 contrib/limited_html_renderer.py              | 11 +++++++
 .../test_limited_html_renderer.py             | 31 +++++++++++++++++++
 2 files changed, 42 insertions(+)
 create mode 100644 contrib/limited_html_renderer.py
 create mode 100644 test/test_contrib/test_limited_html_renderer.py

diff --git a/contrib/limited_html_renderer.py b/contrib/limited_html_renderer.py
new file mode 100644
index 00000000..5576ccdc
--- /dev/null
+++ b/contrib/limited_html_renderer.py
@@ -0,0 +1,11 @@
+import html
+from mistletoe.html_renderer import HTMLRenderer
+
+class LimitedHTMLRenderer(HTMLRenderer):
+    @staticmethod
+    def render_html_block(token):
+        return html.escape(token.content)
+
+    @staticmethod
+    def render_html_span(token):
+        return html.escape(token.content)
diff --git a/test/test_contrib/test_limited_html_renderer.py b/test/test_contrib/test_limited_html_renderer.py
new file mode 100644
index 00000000..6554680a
--- /dev/null
+++ b/test/test_contrib/test_limited_html_renderer.py
@@ -0,0 +1,31 @@
+from contrib.limited_html_renderer import LimitedHTMLRenderer
+from mistletoe.block_token import Document
+import random
+import string
+from unittest import TestCase
+
+class TestLimitedHTMLRenderer(TestCase):
+    def setUp(self):
+        self.renderer = LimitedHTMLRenderer()
+        self.renderer.__enter__()
+        self.addCleanup(self.renderer.__exit__, None, None, None)
+
+    def check_render(self, inputString, expected, errormsg):
+        output = self.renderer.render(Document(inputString))
+        output = output.strip()
+        self.assertEqual(output, expected, errormsg)
+
+    def test_render_inline_div(self):
+        input = '<div>hello</div>'
+        output = '&lt;div&gt;hello&lt;/div&gt;'
+        self.check_render(input, output, 'One line div is not escaped')
+
+    def test_render_inline_span(self):
+        input = '<span>hello</span>'
+        output = '<p>&lt;span&gt;hello&lt;/span&gt;</p>'
+        self.check_render(input, output, 'One line span is not escaped')
+
+    def test_render_embedded_markdown(self):
+        input = '<div>\n\n*hello*\n\n</div>'
+        output = '&lt;div&gt;\n<p><em>hello</em></p>\n&lt;/div&gt;'
+        self.check_render(input, output, 'Markdown inside div is unexpectedly escaped')