tests: add tests for evil HTML filtering
[akkoma] / test / web / mastodon_api / account_view_test.exs
1 defmodule Pleroma.Web.MastodonAPI.AccountViewTest do
2 use Pleroma.DataCase
3 import Pleroma.Factory
4 alias Pleroma.Web.MastodonAPI.AccountView
5 alias Pleroma.User
6
7 test "Represent a user account" do
8 source_data = %{
9 "tag" => [
10 %{
11 "type" => "Emoji",
12 "icon" => %{"url" => "/file.png"},
13 "name" => ":karjalanpiirakka:"
14 }
15 ]
16 }
17
18 user =
19 insert(:user, %{
20 info: %{"note_count" => 5, "follower_count" => 3, "source_data" => source_data},
21 nickname: "shp@shitposter.club",
22 name: ":karjalanpiirakka: shp",
23 bio: "<script src=\"invalid-html\"></script><span>valid html</span>",
24 inserted_at: ~N[2017-08-15 15:47:06.597036]
25 })
26
27 expected = %{
28 id: to_string(user.id),
29 username: "shp",
30 acct: user.nickname,
31 display_name: user.name,
32 locked: false,
33 created_at: "2017-08-15T15:47:06.000Z",
34 followers_count: 3,
35 following_count: 0,
36 statuses_count: 5,
37 note: "<span>valid html</span>",
38 url: user.ap_id,
39 avatar: "http://localhost:4001/images/avi.png",
40 avatar_static: "http://localhost:4001/images/avi.png",
41 header: "http://localhost:4001/images/banner.png",
42 header_static: "http://localhost:4001/images/banner.png",
43 emojis: [
44 %{
45 "static_url" => "/file.png",
46 "url" => "/file.png",
47 "shortcode" => "karjalanpiirakka",
48 "visible_in_picker" => false
49 }
50 ],
51 fields: [],
52 source: %{
53 note: "",
54 privacy: "public",
55 sensitive: "false"
56 }
57 }
58
59 assert expected == AccountView.render("account.json", %{user: user})
60 end
61
62 test "Represent a smaller mention" do
63 user = insert(:user)
64
65 expected = %{
66 id: to_string(user.id),
67 acct: user.nickname,
68 username: user.nickname,
69 url: user.ap_id
70 }
71
72 assert expected == AccountView.render("mention.json", %{user: user})
73 end
74
75 test "represent a relationship" do
76 user = insert(:user)
77 other_user = insert(:user)
78
79 {:ok, user} = User.follow(user, other_user)
80 {:ok, user} = User.block(user, other_user)
81
82 expected = %{
83 id: to_string(other_user.id),
84 following: false,
85 followed_by: false,
86 blocking: true,
87 muting: false,
88 requested: false,
89 domain_blocking: false
90 }
91
92 assert expected == AccountView.render("relationship.json", %{user: user, target: other_user})
93 end
94 end