diff mbox

t2600: Test Markdown and HTML sanitizing

Message ID 20170423192128.4740-1-lfleischer@archlinux.org
State Accepted, archived
Headers show

Commit Message

Lukas Fleischer April 23, 2017, 7:21 p.m. UTC 
Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
---
 test/t2600-rendercomment.sh | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
diff mbox

Patch

diff --git a/test/t2600-rendercomment.sh b/test/t2600-rendercomment.sh
index 6db9467..8da1529 100755
--- a/test/t2600-rendercomment.sh
+++ b/test/t2600-rendercomment.sh
@@ -21,4 +21,46 @@  test_expect_success 'Test comment rendering.' '
 	test_cmp actual expected
 '
 
+test_expect_success 'Test Markdown conversion.' '
+	cat <<-EOD | sqlite3 aur.db &&
+	INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (2, 1, "*Hello* [world](https://www.archlinux.org/)!", "");
+	EOD
+	"$RENDERCOMMENT" 2 &&
+	cat <<-EOD >expected &&
+	<p><em>Hello</em> <a href="https://www.archlinux.org/">world</a>!</p>
+	EOD
+	cat <<-EOD | sqlite3 aur.db >actual &&
+	SELECT RenderedComment FROM PackageComments WHERE ID = 2;
+	EOD
+	test_cmp actual expected
+'
+
+test_expect_success 'Test HTML sanitizing.' '
+	cat <<-EOD | sqlite3 aur.db &&
+	INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (3, 1, "<script>alert(""XSS!"");</script>", "");
+	EOD
+	"$RENDERCOMMENT" 3 &&
+	cat <<-EOD >expected &&
+	&lt;script&gt;alert("XSS!");&lt;/script&gt;
+	EOD
+	cat <<-EOD | sqlite3 aur.db >actual &&
+	SELECT RenderedComment FROM PackageComments WHERE ID = 3;
+	EOD
+	test_cmp actual expected
+'
+
+test_expect_success 'Test link conversion.' '
+	cat <<-EOD | sqlite3 aur.db &&
+	INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (4, 1, "Visit https://www.archlinux.org/.", "");
+	EOD
+	"$RENDERCOMMENT" 4 &&
+	cat <<-EOD >expected &&
+	<p>Visit <a href="https://www.archlinux.org/">https://www.archlinux.org/</a>.</p>
+	EOD
+	cat <<-EOD | sqlite3 aur.db >actual &&
+	SELECT RenderedComment FROM PackageComments WHERE ID = 4;
+	EOD
+	test_cmp actual expected
+'
+
 test_done