git.squeep.com Git - akkoma/blob - test/web/common_api/common_api_test.exs

   1 defmodule Pleroma.Web.CommonAPI.Test do
   2   use Pleroma.DataCase
   3   alias Pleroma.Web.CommonAPI
   4   alias Pleroma.User
   5
   6   import Pleroma.Factory
   7
   8   test "it de-duplicates tags" do
   9     user = insert(:user)
  10     {:ok, activity} = CommonAPI.post(user, %{"status" => "#2hu #2HU"})
  11
  12     assert activity.data["object"]["tag"] == ["2hu"]
  13   end
  14
  15   test "it adds emoji when updating profiles" do
  16     user = insert(:user, %{name: ":karjalanpiirakka:"})
  17
  18     CommonAPI.update(user)
  19     user = User.get_cached_by_ap_id(user.ap_id)
  20     [karjalanpiirakka] = user.info.source_data["tag"]
  21
  22     assert karjalanpiirakka["name"] == ":karjalanpiirakka:"
  23   end
  24
  25   describe "posting" do
  26     test "it filters out obviously bad tags when accepting a post as HTML" do
  27       user = insert(:user)
  28
  29       post = "<p><b>2hu</b></p><script>alert('xss')</script>"
  30
  31       {:ok, activity} =
  32         CommonAPI.post(user, %{
  33           "status" => post,
  34           "content_type" => "text/html"
  35         })
  36
  37       content = activity.data["object"]["content"]
  38       assert content == "<p><b>2hu</b></p>alert('xss')"
  39     end
  40
  41     test "it filters out obviously bad tags when accepting a post as Markdown" do
  42       user = insert(:user)
  43
  44       post = "<p><b>2hu</b></p><script>alert('xss')</script>"
  45
  46       {:ok, activity} =
  47         CommonAPI.post(user, %{
  48           "status" => post,
  49           "content_type" => "text/markdown"
  50         })
  51
  52       content = activity.data["object"]["content"]
  53       assert content == "<p><b>2hu</b></p>alert('xss')"
  54     end
  55   end
  56 end