mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 10:43:03 +01:00
199f34e42e
Fixes a few edge cases: - URLs within code blocks used to get redundant <> added, breaking bash code snippets like `curl https://...` into `curl <https://...>`. - Links written with markdown's <https://...> syntax also used to get an extra pair of brackets. Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
106 lines
3.4 KiB
Bash
Executable file
106 lines
3.4 KiB
Bash
Executable file
#!/bin/sh
|
|
|
|
test_description='rendercomment tests'
|
|
|
|
. ./setup.sh
|
|
|
|
test_expect_success 'Test comment rendering.' '
|
|
cat <<-EOD | sqlite3 aur.db &&
|
|
INSERT INTO PackageBases (ID, Name, PackagerUID, SubmittedTS, ModifiedTS, FlaggerComment) VALUES (1, "foobar", 1, 0, 0, "");
|
|
INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (1, 1, "Hello world!
|
|
This is a comment.", "");
|
|
EOD
|
|
"$RENDERCOMMENT" 1 &&
|
|
cat <<-EOD >expected &&
|
|
<p>Hello world!
|
|
This is a comment.</p>
|
|
EOD
|
|
cat <<-EOD | sqlite3 aur.db >actual &&
|
|
SELECT RenderedComment FROM PackageComments WHERE ID = 1;
|
|
EOD
|
|
test_cmp actual expected
|
|
'
|
|
|
|
test_expect_success 'Test Markdown conversion.' '
|
|
cat <<-EOD | sqlite3 aur.db &&
|
|
INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (2, 1, "*Hello* [world](https://www.archlinux.org/)!", "");
|
|
EOD
|
|
"$RENDERCOMMENT" 2 &&
|
|
cat <<-EOD >expected &&
|
|
<p><em>Hello</em> <a href="https://www.archlinux.org/">world</a>!</p>
|
|
EOD
|
|
cat <<-EOD | sqlite3 aur.db >actual &&
|
|
SELECT RenderedComment FROM PackageComments WHERE ID = 2;
|
|
EOD
|
|
test_cmp actual expected
|
|
'
|
|
|
|
test_expect_success 'Test HTML sanitizing.' '
|
|
cat <<-EOD | sqlite3 aur.db &&
|
|
INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (3, 1, "<script>alert(""XSS!"");</script>", "");
|
|
EOD
|
|
"$RENDERCOMMENT" 3 &&
|
|
cat <<-EOD >expected &&
|
|
<script>alert("XSS!");</script>
|
|
EOD
|
|
cat <<-EOD | sqlite3 aur.db >actual &&
|
|
SELECT RenderedComment FROM PackageComments WHERE ID = 3;
|
|
EOD
|
|
test_cmp actual expected
|
|
'
|
|
|
|
test_expect_success 'Test link conversion.' '
|
|
cat <<-EOD | sqlite3 aur.db &&
|
|
INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (4, 1, "
|
|
Visit https://www.archlinux.org/.
|
|
Visit <https://www.archlinux.org/>.
|
|
Visit \`https://www.archlinux.org/\`.
|
|
Visit [Arch Linux](https://www.archlinux.org/).
|
|
Visit [Arch Linux][arch].
|
|
[arch]: https://www.archlinux.org/
|
|
", "");
|
|
EOD
|
|
"$RENDERCOMMENT" 4 &&
|
|
cat <<-EOD >expected &&
|
|
<p>Visit <a href="https://www.archlinux.org/">https://www.archlinux.org/</a>.
|
|
Visit <a href="https://www.archlinux.org/">https://www.archlinux.org/</a>.
|
|
Visit <code>https://www.archlinux.org/</code>.
|
|
Visit <a href="https://www.archlinux.org/">Arch Linux</a>.
|
|
Visit <a href="https://www.archlinux.org/">Arch Linux</a>.</p>
|
|
EOD
|
|
cat <<-EOD | sqlite3 aur.db >actual &&
|
|
SELECT RenderedComment FROM PackageComments WHERE ID = 4;
|
|
EOD
|
|
test_cmp actual expected
|
|
'
|
|
|
|
test_expect_success 'Test Git commit linkification.' '
|
|
local oid=`git -C aur.git rev-parse --verify HEAD`
|
|
cat <<-EOD | sqlite3 aur.db &&
|
|
INSERT INTO PackageComments (ID, PackageBaseID, Comments, RenderedComment) VALUES (5, 1, "
|
|
$oid
|
|
${oid:0:7}
|
|
x.$oid.x
|
|
${oid}x
|
|
0123456789abcdef
|
|
\`$oid\`
|
|
http://example.com/$oid
|
|
", "");
|
|
EOD
|
|
"$RENDERCOMMENT" 5 &&
|
|
cat <<-EOD >expected &&
|
|
<p><a href="https://aur.archlinux.org/cgit/aur.git/log/?h=foobar&id=${oid:0:12}">${oid:0:12}</a>
|
|
<a href="https://aur.archlinux.org/cgit/aur.git/log/?h=foobar&id=${oid:0:7}">${oid:0:7}</a>
|
|
x.<a href="https://aur.archlinux.org/cgit/aur.git/log/?h=foobar&id=${oid:0:12}">${oid:0:12}</a>.x
|
|
${oid}x
|
|
0123456789abcdef
|
|
<code>$oid</code>
|
|
<a href="http://example.com/$oid">http://example.com/$oid</a></p>
|
|
EOD
|
|
cat <<-EOD | sqlite3 aur.db >actual &&
|
|
SELECT RenderedComment FROM PackageComments WHERE ID = 5;
|
|
EOD
|
|
test_cmp actual expected
|
|
'
|
|
|
|
test_done
|