diff -r 000000000000 -r 6474c204b198 parser/xml/test/unit/test_sanitizer.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/parser/xml/test/unit/test_sanitizer.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,21 @@
+function run_test() {
+  var Ci = Components.interfaces;
+  var Cc = Components.classes;
+
+  // vectors by the html5security project (https://code.google.com/p/html5security/ & Creative Commons 3.0 BY), see CC-BY-LICENSE for the full license
+  load("results.js");   // gives us a `vectors' array
+
+  var ParserUtils =  Cc["@mozilla.org/parserutils;1"].getService(Ci.nsIParserUtils);
+  var sanitizeFlags = ParserUtils.SanitizerCidEmbedsOnly|ParserUtils.SanitizerDropForms|ParserUtils.SanitizerDropNonCSSPresentation;
+  // flags according to 
+  // http://mxr.mozilla.org/comm-central/source/mailnews/mime/src/mimemoz2.cpp#2218
+  // and default settings
+
+
+  for (var item in vectors) {
+    var evil = vectors[item].data;
+    var sanitized = vectors[item].sanitized;
+    var out = ParserUtils.sanitize(evil, sanitizeFlags);
+    do_check_eq(sanitized, out);
+  }
+}