From b49252f3337054918ebc4723c254df4a9b36c7e1 Mon Sep 17 00:00:00 2001
From: "G.Ambatte" <sean@robertson-family.nz>
Date: Sun, 19 Jul 2026 12:45:53 +1200
Subject: [PATCH] Update safeHTML tests

---
 tests/html/safeHTML.test.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/html/safeHTML.test.js b/tests/html/safeHTML.test.js
index 0b5b4c169..71ab668ba 100644
--- a/tests/html/safeHTML.test.js
+++ b/tests/html/safeHTML.test.js
@@ -43,6 +43,12 @@ test('Javascript via inline event handler - onMouseOver', function() {
 	expect(rendered).toBe('<div>Hover over me</div>');
 });
 
+test('Javascript via multiple inline event handlers - onClick + onMouseOver', function() {
+	const source = `<div onclick="alert('This is a JavaScript injection via inline event handler')" onmouseover="alert('This is a JavaScript injection via inline event handler')">Hover over or Click me</div>`;
+	const rendered = safeHTML(source);
+	expect(rendered).toBe('<div>Hover over or Click me</div>');
+});
+
 test('Javascript via data attribute', function() {
 	const source = `<div data-code="javascript:alert('This is a JavaScript injection via data attribute')">Test</div>`;
 	const rendered = safeHTML(source);