Perms: Fixed some issues made when adding transactions

[bookstack] / tests / Api / PagesApiTest.php

diff --git a/tests/Api/PagesApiTest.php b/tests/Api/PagesApiTest.php
index 75cc2807fa58fc8c5d5978474541d8c458eb4b60..22659d5bb726bf011403ce14cc728d810bde861a 100644 (file)
--- a/tests/Api/PagesApiTest.php
+++ b/tests/Api/PagesApiTest.php
@@ -27,6 +27,10 @@ class PagesApiTest extends TestCase
                 'slug'     => $firstPage->slug,
                 'book_id'  => $firstPage->book->id,
                 'priority' => $firstPage->priority,
                 'slug'     => $firstPage->slug,
                 'book_id'  => $firstPage->book->id,
                 'priority' => $firstPage->priority,

+                'owned_by'   => $firstPage->owned_by,
+                'created_by' => $firstPage->created_by,
+                'updated_by' => $firstPage->updated_by,
+                'revision_count' => $firstPage->revision_count,

             ],
         ]]);
     }
             ],
         ]]);
     }


@@ -45,6 +49,7 @@ class PagesApiTest extends TestCase
                     'value' => 'tagvalue',
                 ],
             ],
                     'value' => 'tagvalue',
                 ],
             ],

+            'priority' => 15,

         ];
 
         $resp = $this->postJson($this->baseEndpoint, $details);
         ];
 
         $resp = $this->postJson($this->baseEndpoint, $details);


@@ -159,6 +164,20 @@ class PagesApiTest extends TestCase
         $this->assertStringContainsString('testing', $html);
     }
 
         $this->assertStringContainsString('testing', $html);
     }
 

+    public function test_read_endpoint_provides_raw_html()
+    {
+        $html = "<p>testing</p><script>alert('danger')</script><h1>Hello</h1>";
+
+        $this->actingAsApiEditor();
+        $page = $this->entities->page();
+        $page->html = $html;
+        $page->save();
+
+        $resp = $this->getJson($this->baseEndpoint . "/{$page->id}");
+        $this->assertEquals($html, $resp->json('raw_html'));
+        $this->assertNotEquals($html, $resp->json('html'));
+    }
+

     public function test_read_endpoint_returns_not_found()
     {
         $this->actingAsApiEditor();
     public function test_read_endpoint_returns_not_found()
     {
         $this->actingAsApiEditor();


@@ -193,6 +212,7 @@ class PagesApiTest extends TestCase
                     'value' => 'freshtagval',
                 ],
             ],
                     'value' => 'freshtagval',
                 ],
             ],

+            'priority' => 15,

         ];
 
         $resp = $this->putJson($this->baseEndpoint . "/{$page->id}", $details);
         ];
 
         $resp = $this->putJson($this->baseEndpoint . "/{$page->id}", $details);