// javascript: protocol should be blocked
        assertFalse(result.contains("javascript:"));
    }

    @Test
    public void test_render_xss_dataProtocol() {
        String malicious = "[Click me](data:text/html,<script>alert('XSS')</script>)";
        String result = markdownRenderer.render(malicious);
        // data: protocol should be blocked

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.test.net.protocol.xxx1;

import java.io.IOException;
import java.net.URL;
import java.net.URLConnection;
import java.net.URLStreamHandler;

public class Handler extends URLStreamHandler {

import org.lastaflute.web.login.credential.LoginCredential;

/**
 * SPNEGO authentication credential implementation.
 *
 * This class represents login credentials obtained through SPNEGO (Security Provider
 * Negotiation Protocol) authentication. It contains the username extracted from the
 * SPNEGO authentication process, typically from a Kerberos ticket.
 */
public class SpnegoCredential implements LoginCredential, FessCredential {

    <!-- Protocol types may only define constants in interfaces -->
    <suppress checks="InterfaceIsTypeCheck"
              files=".*[/\\]tooling-api[/\\]src[/\\]main[/\\]java[/\\]org[/\\]gradle[/\\]tooling[/\\]internal[/\\]protocol.+"/>
    <suppress checks="InterfaceIsTypeCheck"

        }
        // Block known dangerous protocols
        var dangerousProtocols = ['javascript:', 'data:', 'vbscript:', 'file:', 'about:', 'blob:'];
        for (var i = 0; i < dangerousProtocols.length; i++) {
            if (trimmedUrl.startsWith(dangerousProtocols[i])) {
                return '#';
            }
        }
        // Block URLs that look like protocol:// (unknown protocols)

        // IPv6 without port
        assertEquals("https://[::1]", IpAddressUtil.buildUrl("https", ipv6, 0, ""));

        // Null protocol or address
        assertNull(IpAddressUtil.buildUrl(null, ipv4, 8080, "/path"));
        assertNull(IpAddressUtil.buildUrl("http", (InetAddress) null, 8080, "/path"));
    }

    @Test

import org.codelibs.fess.util.ComponentUtil;
import org.junit.jupiter.api.Test;
import org.junit.jupiter.api.TestInfo;

/**
 * Test class for GoAction.
 * Tests the isFileSystemPath method for various protocol types.
 */
public class GoActionTest extends UnitFessTestCase {

    private TestableGoAction goAction;

    @Override
    protected void setUp(TestInfo testInfo) throws Exception {
        super.setUp(testInfo);

                // Links - only allow http/https protocols
                .allowElements("a")
                .allowUrlProtocols("http", "https")
                .allowAttributes("href")
                .onElements("a")
                .requireRelNofollowOnLinks()
                // Images - only allow http/https protocols
                .allowElements("img")
                .allowUrlProtocols("http", "https")

 * such as metadata requests and logout actions.
 */
public enum SsoResponseType {
    /**
     * Indicates a request for SSO metadata, which is typically used for
     * configuration and discovery in protocols like SAML.
     */
    METADATA,

    /**
     * Indicates a request to perform a logout operation, terminating the
     * user's SSO session.
     */
    LOGOUT;

    @Max(value = 2147483647)
    @ValidateTypeFailure
    public Integer port;

    /**
     * The authentication realm.
     */
    @Size(max = 100)
    public String authRealm;

    /**
     * The protocol scheme (http, https).
     */
    @Size(max = 10)
    public String protocolScheme;

    /**
     * The username for authentication.
     */
    @Required
    @Size(max = 100)
    public String username;