// GoToSocial // Copyright (C) GoToSocial Authors admin@gotosocial.org // SPDX-License-Identifier: AGPL-3.0-or-later // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Affero General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Affero General Public License for more details. // // You should have received a copy of the GNU Affero General Public License // along with this program. If not, see . package text_test import ( "testing" "github.com/stretchr/testify/suite" "github.com/superseriousbusiness/gotosocial/internal/text" ) const ( sanitizeHTML = `here's some naughty html: !!!` sanitizedHTML = `here's some naughty html: !!!` sanitizeOutgoing = `

gotta test some fucking ''''''''' marks

` sanitizedOutgoing = `

gotta test some fucking ''''''''' marks

` ) type SanitizeTestSuite struct { suite.Suite } func (suite *SanitizeTestSuite) TestSanitizeOutgoing() { s := text.SanitizeHTML(sanitizeOutgoing) suite.Equal(sanitizedOutgoing, s) } func (suite *SanitizeTestSuite) TestSanitizeHTML() { s := text.SanitizeHTML(sanitizeHTML) suite.Equal(sanitizedHTML, s) } func (suite *SanitizeTestSuite) TestSanitizeCaption1() { dodgyCaption := "this is just a normal caption ;)" sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("this is just a normal caption ;)", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCaption2() { dodgyCaption := "here's a LOUD caption" sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("here's a LOUD caption", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCaption3() { dodgyCaption := "" sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCaption4() { dodgyCaption := ` here is a multi line caption with some newlines ` sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("here is\na multi line\ncaption\nwith some newlines", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCaption5() { // html-escaped: " hello world" dodgyCaption := `<script>console.log('aha!')</script> hello world` sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("hello world", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCaption6() { // html-encoded: " hello world" dodgyCaption := `<script>console.log('aha!')</script> hello world` sanitized := text.SanitizePlaintext(dodgyCaption) suite.Equal("hello world", sanitized) } func (suite *SanitizeTestSuite) TestSanitizeCustomCSS() { customCSS := `.toot .username { color: var(--link_fg); line-height: 2rem; margin-top: -0.5rem; align-self: start; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }` sanitized := text.SanitizePlaintext(customCSS) suite.Equal(customCSS, sanitized) // should be the same as it was before } func (suite *SanitizeTestSuite) TestSanitizeNaughtyCustomCSS1() { // try to break out of pee pee poo poo