2019-11-07 06:34:28 -07:00
|
|
|
// Copyright 2019 The Gitea Authors. All rights reserved.
|
2022-11-27 11:20:29 -07:00
|
|
|
// SPDX-License-Identifier: MIT
|
2019-11-07 06:34:28 -07:00
|
|
|
|
|
|
|
package templates
|
|
|
|
|
|
|
|
import (
|
2024-02-25 03:45:56 -07:00
|
|
|
"html/template"
|
2024-06-11 08:52:12 -06:00
|
|
|
"strings"
|
2019-11-07 06:34:28 -07:00
|
|
|
"testing"
|
|
|
|
|
2024-06-11 08:52:12 -06:00
|
|
|
"code.gitea.io/gitea/modules/util"
|
|
|
|
|
2019-11-07 06:34:28 -07:00
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
)
|
|
|
|
|
|
|
|
func TestSubjectBodySeparator(t *testing.T) {
|
|
|
|
test := func(input, subject, body string) {
|
|
|
|
loc := mailSubjectSplit.FindIndex([]byte(input))
|
|
|
|
if loc == nil {
|
|
|
|
assert.Empty(t, subject, "no subject found, but one expected")
|
|
|
|
assert.Equal(t, body, input)
|
|
|
|
} else {
|
2022-06-20 04:02:49 -06:00
|
|
|
assert.Equal(t, subject, input[0:loc[0]])
|
|
|
|
assert.Equal(t, body, input[loc[1]:])
|
2019-11-07 06:34:28 -07:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
test("Simple\n---------------\nCase",
|
|
|
|
"Simple\n",
|
|
|
|
"\nCase")
|
|
|
|
test("Only\nBody",
|
|
|
|
"",
|
|
|
|
"Only\nBody")
|
|
|
|
test("Minimal\n---\nseparator",
|
|
|
|
"Minimal\n",
|
|
|
|
"\nseparator")
|
|
|
|
test("False --- separator",
|
|
|
|
"",
|
|
|
|
"False --- separator")
|
|
|
|
test("False\n--- separator",
|
|
|
|
"",
|
|
|
|
"False\n--- separator")
|
|
|
|
test("False ---\nseparator",
|
|
|
|
"",
|
|
|
|
"False ---\nseparator")
|
|
|
|
test("With extra spaces\n----- \t \nBody",
|
|
|
|
"With extra spaces\n",
|
|
|
|
"\nBody")
|
|
|
|
test("With leading spaces\n -------\nOnly body",
|
|
|
|
"",
|
|
|
|
"With leading spaces\n -------\nOnly body")
|
|
|
|
test("Multiple\n---\n-------\n---\nSeparators",
|
|
|
|
"Multiple\n",
|
|
|
|
"\n-------\n---\nSeparators")
|
2024-04-27 02:03:49 -06:00
|
|
|
test("Insufficient\n--\nSeparators",
|
2019-11-07 06:34:28 -07:00
|
|
|
"",
|
2024-04-27 02:03:49 -06:00
|
|
|
"Insufficient\n--\nSeparators")
|
2019-11-07 06:34:28 -07:00
|
|
|
}
|
2024-02-18 02:52:02 -07:00
|
|
|
|
|
|
|
func TestJSEscapeSafe(t *testing.T) {
|
2024-06-18 16:32:45 -06:00
|
|
|
assert.EqualValues(t, `\u0026\u003C\u003E\'\"`, jsEscapeSafe(`&<>'"`))
|
2024-02-18 02:52:02 -07:00
|
|
|
}
|
2024-02-25 03:45:56 -07:00
|
|
|
|
2024-03-01 03:16:19 -07:00
|
|
|
func TestSanitizeHTML(t *testing.T) {
|
|
|
|
assert.Equal(t, template.HTML(`<a href="/" rel="nofollow">link</a> xss <div>inline</div>`), SanitizeHTML(`<a href="/">link</a> <a href="javascript:">xss</a> <div style="dangerous">inline</div>`))
|
|
|
|
}
|
2024-06-11 07:07:10 -06:00
|
|
|
|
2024-06-11 08:52:12 -06:00
|
|
|
func TestTemplateTruthy(t *testing.T) {
|
|
|
|
tmpl := template.New("test")
|
2024-06-18 16:32:45 -06:00
|
|
|
tmpl.Funcs(template.FuncMap{"Iif": iif})
|
2024-06-11 08:52:12 -06:00
|
|
|
template.Must(tmpl.Parse(`{{if .Value}}true{{else}}false{{end}}:{{Iif .Value "true" "false"}}`))
|
|
|
|
|
|
|
|
cases := []any{
|
|
|
|
nil, false, true, "", "string", 0, 1,
|
|
|
|
byte(0), byte(1), int64(0), int64(1), float64(0), float64(1),
|
|
|
|
complex(0, 0), complex(1, 0),
|
|
|
|
(chan int)(nil), make(chan int),
|
|
|
|
(func())(nil), func() {},
|
|
|
|
util.ToPointer(0), util.ToPointer(util.ToPointer(0)),
|
|
|
|
util.ToPointer(1), util.ToPointer(util.ToPointer(1)),
|
|
|
|
[0]int{},
|
|
|
|
[1]int{0},
|
|
|
|
[]int(nil),
|
|
|
|
[]int{},
|
|
|
|
[]int{0},
|
|
|
|
map[any]any(nil),
|
|
|
|
map[any]any{},
|
|
|
|
map[any]any{"k": "v"},
|
|
|
|
(*struct{})(nil),
|
|
|
|
struct{}{},
|
|
|
|
util.ToPointer(struct{}{}),
|
|
|
|
}
|
|
|
|
w := &strings.Builder{}
|
|
|
|
truthyCount := 0
|
|
|
|
for i, v := range cases {
|
|
|
|
w.Reset()
|
|
|
|
assert.NoError(t, tmpl.Execute(w, struct{ Value any }{v}), "case %d (%T) %#v fails", i, v, v)
|
|
|
|
out := w.String()
|
|
|
|
truthyCount += util.Iif(out == "true:true", 1, 0)
|
|
|
|
truthyMatches := out == "true:true" || out == "false:false"
|
|
|
|
assert.True(t, truthyMatches, "case %d (%T) %#v fail: %s", i, v, v, out)
|
|
|
|
}
|
|
|
|
assert.True(t, truthyCount != 0 && truthyCount != len(cases))
|
2024-06-11 07:07:10 -06:00
|
|
|
}
|