76 lines
1.8 KiB
Go
76 lines
1.8 KiB
Go
package store
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestComment_Sanitize(t *testing.T) {
|
|
|
|
tbl := []struct {
|
|
inp Comment
|
|
out Comment
|
|
}{
|
|
{inp: Comment{}, out: Comment{}},
|
|
{
|
|
inp: Comment{
|
|
Text: `blah <a href="javascript:alert('XSS1')" onmouseover="alert('XSS2')">XSS<a>` + "\n\t",
|
|
User: User{ID: `<a href="http://blah.com">username</a>`},
|
|
},
|
|
out: Comment{
|
|
Text: "blah XSS\n\t",
|
|
User: User{ID: `<a href="http://blah.com">username</a>`},
|
|
},
|
|
},
|
|
}
|
|
|
|
for n, tt := range tbl {
|
|
tt.inp.Sanitize()
|
|
assert.Equal(t, tt.out, tt.inp, "check #%d", n)
|
|
}
|
|
}
|
|
|
|
func TestComment_PrepareUntrusted(t *testing.T) {
|
|
comment := Comment{
|
|
Text: `blah`,
|
|
User: User{ID: "username"},
|
|
ParentID: "p123",
|
|
ID: "123",
|
|
Locator: Locator{SiteID: "site", URL: "url"},
|
|
Score: 10,
|
|
Pin: true,
|
|
Deleted: true,
|
|
Timestamp: time.Date(2018, 1, 1, 9, 30, 0, 0, time.Local),
|
|
Votes: map[string]bool{"uu": true},
|
|
}
|
|
|
|
comment.PrepareUntrusted()
|
|
assert.Equal(t, "", comment.ID)
|
|
assert.Equal(t, "p123", comment.ParentID)
|
|
assert.Equal(t, "blah", comment.Text)
|
|
assert.Equal(t, 0, comment.Score)
|
|
assert.Equal(t, false, comment.Pin)
|
|
assert.Equal(t, time.Time{}, comment.Timestamp)
|
|
assert.Equal(t, false, comment.Deleted)
|
|
assert.Equal(t, make(map[string]bool), comment.Votes)
|
|
assert.Equal(t, User{ID: "username"}, comment.User)
|
|
|
|
}
|
|
|
|
func TestComment_EncodeID(t *testing.T) {
|
|
tbl := []struct {
|
|
id string
|
|
hash string
|
|
}{
|
|
{"myid", "6e34471f84557e1713012d64a7477c71bfdac631"},
|
|
{"", "da39a3ee5e6b4b0d3255bfef95601890afd80709"},
|
|
{"blah blah", "135a1e01bae742c4a576b20fd41a683f6483ca43"},
|
|
}
|
|
|
|
for i, tt := range tbl {
|
|
assert.Equal(t, tt.hash, EncodeID(tt.id), "case #%d", i)
|
|
}
|
|
}
|