X-Git-Url: http://source.bookstackapp.com/bookstack/blobdiff_plain/c732970f6e19f14a1107b7429cbf387bcb7848b3..refs/pull/2296/head:/tests/Entity/PageContentTest.php diff --git a/tests/Entity/PageContentTest.php b/tests/Entity/PageContentTest.php index c80b5f1d9..99547fd17 100644 --- a/tests/Entity/PageContentTest.php +++ b/tests/Entity/PageContentTest.php @@ -1,8 +1,8 @@ -assertStatus(302); $page = Page::find($page->id); - $this->assertContains($includeTag, $page->html); + $this->assertStringContainsString($includeTag, $page->html); $this->assertEquals('', $page->text); } @@ -71,6 +71,25 @@ class PageContentTest extends TestCase $pageResp->assertSee($content); } + public function test_page_includes_rendered_on_book_export() + { + $page = Page::query()->first(); + $secondPage = Page::query() + ->where('book_id', '!=', $page->book_id) + ->first(); + + $content = '
my cat is awesome and scratchy
'; + $secondPage->html = $content; + $secondPage->save(); + + $page->html = "{{@{$secondPage->id}#bkmrk-meow}}"; + $page->save(); + + $this->asEditor(); + $htmlContent = $this->get($page->book->getUrl('/export/html')); + $htmlContent->assertSee('my cat is awesome and scratchy'); + } + public function test_page_content_scripts_removed_by_default() { $this->asEditor(); @@ -80,6 +99,7 @@ class PageContentTest extends TestCase $page->save(); $pageView = $this->get($page->getUrl()); + $pageView->assertStatus(200); $pageView->assertDontSee($script); $pageView->assertSee('abc123abc123'); } @@ -103,12 +123,42 @@ class PageContentTest extends TestCase $page->save(); $pageView = $this->get($page->getUrl()); + $pageView->assertStatus(200); $pageView->assertElementNotContains('.page-content', ''); } } + public function test_iframe_js_and_base64_urls_are_removed() + { + $checks = [ + '', + '', + '', + '', + '' + ]; + + $this->asEditor(); + $page = Page::first(); + + foreach ($checks as $check) { + $page->html = $check; + $page->save(); + + $pageView = $this->get($page->getUrl()); + $pageView->assertStatus(200); + $pageView->assertElementNotContains('.page-content', ''); + $pageView->assertElementNotContains('.page-content', 'src='); + $pageView->assertElementNotContains('.page-content', 'javascript:'); + $pageView->assertElementNotContains('.page-content', 'data:'); + $pageView->assertElementNotContains('.page-content', 'base64'); + } + + } + public function test_page_inline_on_attributes_removed_by_default() { $this->asEditor(); @@ -118,6 +168,7 @@ class PageContentTest extends TestCase $page->save(); $pageView = $this->get($page->getUrl()); + $pageView->assertStatus(200); $pageView->assertDontSee($script); $pageView->assertSee('Hello
'); } @@ -130,6 +181,7 @@ class PageContentTest extends TestCase 'Hello
Hello
Hello
', + 'asEditor(); + $page = Page::first(); + + $content = '"Hello & welcome"
', + ]); + + $page->refresh(); + $this->assertEquals('"Hello & welcome"', $page->text); + } }