You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
65 lines
2.6 KiB
65 lines
2.6 KiB
package chat |
|
|
|
import ( |
|
"testing" |
|
|
|
"github.com/owncast/owncast/models" |
|
) |
|
|
|
// Test a bunch of arbitrary markup and markdown to make sure we get sanitized |
|
// and fully rendered HTML out of it. |
|
func TestRenderAndSanitize(t *testing.T) { |
|
messageContent := ` |
|
Test one two three! I go to http://yahoo.com and search for _sports_ and **answers**. |
|
Here is an iframe <iframe src="http://yahoo.com"></iframe> |
|
|
|
## blah blah blah |
|
[test link](http://owncast.online) |
|
<img class="emoji" alt="bananadance.gif" width="600px" src="/img/emoji/bananadance.gif"> |
|
<script src="http://hackers.org/hack.js"></script> |
|
` |
|
|
|
expected := `<p>Test one two three! I go to <a href="http://yahoo.com" rel="nofollow noreferrer noopener" target="_blank">http://yahoo.com</a> and search for <em>sports</em> and <strong>answers</strong>. |
|
Here is an iframe </p> |
|
blah blah blah |
|
<p><a href="http://owncast.online" rel="nofollow noreferrer noopener" target="_blank">test link</a> |
|
<img class="emoji" src="/img/emoji/bananadance.gif"></p>` |
|
|
|
result := models.RenderAndSanitize(messageContent) |
|
if result != expected { |
|
t.Errorf("message rendering/sanitation does not match expected. Got\n%s, \n\n want:\n%s", result, expected) |
|
} |
|
} |
|
|
|
// Test to make sure we block remote images in chat messages. |
|
func TestBlockRemoteImages(t *testing.T) { |
|
messageContent := `<img src="https://via.placeholder.com/350x150"> test ` |
|
expected := `<p> test </p>` |
|
result := models.RenderAndSanitize(messageContent) |
|
|
|
if result != expected { |
|
t.Errorf("message rendering/sanitation does not match expected. Got\n%s, \n\n want:\n%s", result, expected) |
|
} |
|
} |
|
|
|
// Test to make sure emoji images are allowed in chat messages. |
|
func TestAllowEmojiImages(t *testing.T) { |
|
messageContent := `<img src="/img/emoji/beerparrot.gif"> test ` |
|
expected := `<p><img src="/img/emoji/beerparrot.gif"> test <img src="/img/emoji/beerparrot.gif"></p>` |
|
result := models.RenderAndSanitize(messageContent) |
|
|
|
if result != expected { |
|
t.Errorf("message rendering/sanitation does not match expected. Got\n%s, \n\n want:\n%s", result, expected) |
|
} |
|
} |
|
|
|
// Test to verify we can pass raw html and render markdown. |
|
func TestAllowHTML(t *testing.T) { |
|
messageContent := `<img src="/img/emoji/beerparrot.gif"><ul><li>**test thing**</li></ul>` |
|
expected := "<p><img src=\"/img/emoji/beerparrot.gif\"><ul><li><strong>test thing</strong></li></ul></p>\n" |
|
result := models.RenderMarkdown(messageContent) |
|
|
|
if result != expected { |
|
t.Errorf("message rendering does not match expected. Got\n%s, \n\n want:\n%s", result, expected) |
|
} |
|
}
|
|
|