2017-03-13 18:55:02 -04:00
|
|
|
// Copyright 2017 The Hugo Authors. All rights reserved.
|
|
|
|
//
|
|
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
// you may not use this file except in compliance with the License.
|
|
|
|
// You may obtain a copy of the License at
|
|
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
//
|
|
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
// See the License for the specific language governing permissions and
|
|
|
|
// limitations under the License.
|
|
|
|
|
|
|
|
package safe
|
|
|
|
|
|
|
|
import (
|
|
|
|
"html/template"
|
2019-12-10 02:02:15 -05:00
|
|
|
|
2017-03-13 18:55:02 -04:00
|
|
|
"testing"
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
qt "github.com/frankban/quicktest"
|
2017-03-13 18:55:02 -04:00
|
|
|
)
|
|
|
|
|
|
|
|
type tstNoStringer struct{}
|
|
|
|
|
|
|
|
func TestCSS(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{`a[href =~ "//example.com"]#foo`, template.CSS(`a[href =~ "//example.com"]#foo`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.CSS(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestHTML(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{`Hello, <b>World</b> &tc!`, template.HTML(`Hello, <b>World</b> &tc!`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.HTML(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestHTMLAttr(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{` dir="ltr"`, template.HTMLAttr(` dir="ltr"`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
result, err := ns.HTMLAttr(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestJS(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{`c && alert("Hello, World!");`, template.JS(`c && alert("Hello, World!");`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.JS(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestJSStr(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{`Hello, World & O'Reilly\x21`, template.JSStr(`Hello, World & O'Reilly\x21`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.JSStr(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestURL(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{`greeting=H%69&addressee=(World)`, template.URL(`greeting=H%69&addressee=(World)`)},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.URL(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestSanitizeURL(t *testing.T) {
|
|
|
|
t.Parallel()
|
2019-08-10 15:05:17 -04:00
|
|
|
c := qt.New(t)
|
2017-03-13 18:55:02 -04:00
|
|
|
|
|
|
|
ns := New()
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
for _, test := range []struct {
|
2017-03-13 18:55:02 -04:00
|
|
|
a interface{}
|
|
|
|
expect interface{}
|
|
|
|
}{
|
|
|
|
{"http://foo/../../bar", "http://foo/bar"},
|
|
|
|
// errors
|
|
|
|
{tstNoStringer{}, false},
|
|
|
|
} {
|
|
|
|
|
|
|
|
result, err := ns.SanitizeURL(test.a)
|
|
|
|
|
|
|
|
if b, ok := test.expect.(bool); ok && !b {
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.Not(qt.IsNil))
|
2017-03-13 18:55:02 -04:00
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
2019-08-10 15:05:17 -04:00
|
|
|
c.Assert(err, qt.IsNil)
|
|
|
|
c.Assert(result, qt.Equals, test.expect)
|
2017-03-13 18:55:02 -04:00
|
|
|
}
|
|
|
|
}
|