Prevent accidental double RTs or favorites
[akkoma] / test / web / common_api / common_api_test.exs
1 defmodule Pleroma.Web.CommonAPI.Test do
2 use Pleroma.DataCase
3 alias Pleroma.Web.CommonAPI
4 alias Pleroma.User
5 alias Pleroma.Activity
6
7 import Pleroma.Factory
8
9 test "it de-duplicates tags" do
10 user = insert(:user)
11 {:ok, activity} = CommonAPI.post(user, %{"status" => "#2hu #2HU"})
12
13 assert activity.data["object"]["tag"] == ["2hu"]
14 end
15
16 test "it adds emoji when updating profiles" do
17 user = insert(:user, %{name: ":karjalanpiirakka:"})
18
19 CommonAPI.update(user)
20 user = User.get_cached_by_ap_id(user.ap_id)
21 [karjalanpiirakka] = user.info.source_data["tag"]
22
23 assert karjalanpiirakka["name"] == ":karjalanpiirakka:"
24 end
25
26 describe "posting" do
27 test "it filters out obviously bad tags when accepting a post as HTML" do
28 user = insert(:user)
29
30 post = "<p><b>2hu</b></p><script>alert('xss')</script>"
31
32 {:ok, activity} =
33 CommonAPI.post(user, %{
34 "status" => post,
35 "content_type" => "text/html"
36 })
37
38 content = activity.data["object"]["content"]
39 assert content == "<p><b>2hu</b></p>alert('xss')"
40 end
41
42 test "it filters out obviously bad tags when accepting a post as Markdown" do
43 user = insert(:user)
44
45 post = "<p><b>2hu</b></p><script>alert('xss')</script>"
46
47 {:ok, activity} =
48 CommonAPI.post(user, %{
49 "status" => post,
50 "content_type" => "text/markdown"
51 })
52
53 content = activity.data["object"]["content"]
54 assert content == "<p><b>2hu</b></p>alert('xss')"
55 end
56 end
57
58 describe "reactions" do
59 test "repeating a status" do
60 user = insert(:user)
61 other_user = insert(:user)
62
63 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "cofe"})
64
65 {:ok, %Activity{}, _} = CommonAPI.repeat(activity.id, user)
66 end
67
68 test "favoriting a status" do
69 user = insert(:user)
70 other_user = insert(:user)
71
72 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "cofe"})
73
74 {:ok, %Activity{}, _} = CommonAPI.favorite(activity.id, user)
75 end
76
77 test "retweeting a status twice returns an error" do
78 user = insert(:user)
79 other_user = insert(:user)
80
81 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "cofe"})
82 {:ok, %Activity{}, _object} = CommonAPI.repeat(activity.id, user)
83 {:error, _} = CommonAPI.repeat(activity.id, user)
84 end
85
86 test "favoriting a status twice returns an error" do
87 user = insert(:user)
88 other_user = insert(:user)
89
90 {:ok, activity} = CommonAPI.post(other_user, %{"status" => "cofe"})
91 {:ok, %Activity{}, _object} = CommonAPI.favorite(activity.id, user)
92 {:error, _} = CommonAPI.favorite(activity.id, user)
93 end
94 end
95 end