Merge pull request #20 from 18F/convert-foo-bar

Converting foo to bar in path

src/main.go

@@ -5,6 +5,7 @@ import (
 	"html"
 	"net/http"
 	"os"
+	"regexp"
 
 	log "github.com/sirupsen/logrus"
 )
@@ -15,6 +16,8 @@ func init() {
 }
 
 func helloHtml(path string) string {
+	re := regexp.MustCompile(`(?i)foo`)
+	path = re.ReplaceAllString(path, "bar")
 	return fmt.Sprintf("<h1>Salutations AMPD from Go,</h1>\n<p>You've requested: %s</p>\n", html.EscapeString(path))
 }
 

src/main_test.go

@@ -51,3 +51,11 @@ func TestJavaScriptInjection(t *testing.T) {
 		t.Fatal("JavaScript injection attack")
 	}
 }
+
+func TestConvertFoo(t *testing.T) {
+	path := "/foo/bar"
+	text := helloHtml(path)
+	if strings.Contains(text, "foo") {
+		t.Fatal("'foo' in path")
+	}
+}