}
}
- content_html = "Some #content mentioning <a href='#{mentioned_user.ap_id}'>@shp</shp>"
+ content_html = "<script>alert('YAY')</script>Some #content #mentioning <a href='#{mentioned_user.ap_id}'>@shp</a>"
content = HtmlSanitizeEx.strip_tags(content_html)
date = DateTime.from_naive!(~N[2016-05-24 13:26:08.003], "Etc/UTC") |> DateTime.to_iso8601
"like_count" => 5,
"announcement_count" => 3,
"context" => "2hu",
- "tag" => ["nsfw", "content"]
+ "tag" => ["content", "mentioning", "nsfw"]
},
"published" => date,
"context" => "2hu"
"user" => UserRepresenter.to_map(user, %{for: follower}),
"is_local" => true,
"attentions" => [],
- "statusnet_html" => content_html <> "<br>\n#nsfw",
+ "statusnet_html" => HtmlSanitizeEx.basic_html(content_html) <> "<br />\n#nsfw",
"text" => content <> "\n#nsfw",
"is_post_verb" => true,
"created_at" => "Tue May 24 13:26:08 +0000 2016",
"repeat_num" => 3,
"favorited" => false,
"repeated" => false,
- "external_url" => activity.data["id"]
+ "external_url" => activity.data["id"],
+ "tags" => ["content", "mentioning", "nsfw"]
}
assert ActivityRepresenter.to_map(activity, %{user: user, for: follower, mentioned: [mentioned_user]}) == expected_status