'RevisionForm should strip out any harmful onload attributes from
input markup
bug 821986'

def test_form_onload_attr_filter(self):

    rev = revision(save=True, is_approved=True, content='\n                                                <svg><circle    onload=confirm(3)>\n                                ')
    request = self.rf.get('/')
    rev_form = RevisionForm(instance=rev, request=request)
    self.assertNotIn('onload', rev_form.initial['content'])
