From eec68b05b0b5a06249a5281c6960d60fe6af1c9e Mon Sep 17 00:00:00 2001
From: Brandon Williams <mbw234@gmail.com>
Date: Wed, 12 Sep 2018 22:08:15 -0400
Subject: [PATCH] A test and pin swift-snapshot-testing.

---
 Package.swift                         | 2 +-
 Tests/HtmlTests/AttributesTests.swift | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/Package.swift b/Package.swift
index 6e58d0a..84946f5 100644
--- a/Package.swift
+++ b/Package.swift
@@ -10,7 +10,7 @@ let package = Package(
       targets: ["Html"]),
   ],
   dependencies: [
-    .package(url: "https://github.com/pointfreeco/swift-snapshot-testing.git", .revision("69b48c8")),
+    .package(url: "https://github.com/pointfreeco/swift-snapshot-testing.git", from: "0.0.1")
   ],
   targets: [
     .target(
diff --git a/Tests/HtmlTests/AttributesTests.swift b/Tests/HtmlTests/AttributesTests.swift
index e0c3408..1ff569c 100644
--- a/Tests/HtmlTests/AttributesTests.swift
+++ b/Tests/HtmlTests/AttributesTests.swift
@@ -14,6 +14,11 @@ final class AttributesTests: XCTestCase {
     XCTAssertEqual("<th scope=\"row\"/>", render(th([scope(.row)], [])))
     XCTAssertEqual("<th scope=\"rowgroup\"/>", render(th([scope(.rowgroup)], [])))
 
+    XCTAssertEqual(
+      "<a href=\"/user/foo&quot; onmouseover=&quot;alert(1)\">XSS</a>",
+      render(a([href("/user/foo\" onmouseover=\"alert(1)")], ["XSS"]))
+    )
+
     XCTAssertEqual("<a accesskey=\"a\"/>", render(a([accesskey("a")], [])))
 
     XCTAssertEqual(