|  | // Copyright (C) 2009 The Android Open Source Project | 
|  | // | 
|  | // Licensed under the Apache License, Version 2.0 (the "License"); | 
|  | // you may not use this file except in compliance with the License. | 
|  | // You may obtain a copy of the License at | 
|  | // | 
|  | // http://www.apache.org/licenses/LICENSE-2.0 | 
|  | // | 
|  | // Unless required by applicable law or agreed to in writing, software | 
|  | // distributed under the License is distributed on an "AS IS" BASIS, | 
|  | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | // See the License for the specific language governing permissions and | 
|  | // limitations under the License. | 
|  |  | 
|  | package com.google.gwtexpui.safehtml.client; | 
|  |  | 
|  | import static com.google.common.truth.Truth.assertThat; | 
|  |  | 
|  | import java.util.Arrays; | 
|  | import java.util.Collections; | 
|  | import java.util.List; | 
|  | import org.junit.Test; | 
|  |  | 
|  | public class SafeHtml_ReplaceTest { | 
|  | @Test | 
|  | public void replaceEmpty() { | 
|  | SafeHtml o = html("A\nissue42\nB"); | 
|  | assertThat(o.replaceAll(null)).isSameAs(o); | 
|  | assertThat(o.replaceAll(Collections.<FindReplace>emptyList())).isSameAs(o); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceOneLink() { | 
|  | SafeHtml o = html("A\nissue 42\nB"); | 
|  | SafeHtml n = | 
|  | o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); | 
|  | assertThat(o).isNotSameAs(n); | 
|  | assertThat(n.asString()).isEqualTo("A\n<a href=\"?42\">issue 42</a>\nB"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceNoLeadingOrTrailingText() { | 
|  | SafeHtml o = html("issue 42"); | 
|  | SafeHtml n = | 
|  | o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); | 
|  | assertThat(o).isNotSameAs(n); | 
|  | assertThat(n.asString()).isEqualTo("<a href=\"?42\">issue 42</a>"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceTwoLinks() { | 
|  | SafeHtml o = html("A\nissue 42\nissue 9918\nB"); | 
|  | SafeHtml n = | 
|  | o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); | 
|  | assertThat(o).isNotSameAs(n); | 
|  | assertThat(n.asString()) | 
|  | .isEqualTo("A\n<a href=\"?42\">issue 42</a>\n<a href=\"?9918\">issue 9918</a>\nB"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceInOrder() { | 
|  | SafeHtml o = html("A\nissue 42\nReally GWTEXPUI-9918 is better\nB"); | 
|  | SafeHtml n = | 
|  | o.replaceAll( | 
|  | repls( | 
|  | new RawFindReplace("(GWTEXPUI-(\\d+))", "<a href=\"gwtexpui-bug?$2\">$1</a>"), | 
|  | new RawFindReplace("(issue\\s+(\\d+))", "<a href=\"generic-bug?$2\">$1</a>"))); | 
|  | assertThat(o).isNotSameAs(n); | 
|  | assertThat(n.asString()) | 
|  | .isEqualTo( | 
|  | "A\n" | 
|  | + "<a href=\"generic-bug?42\">issue 42</a>\n" | 
|  | + "Really <a href=\"gwtexpui-bug?9918\">GWTEXPUI-9918</a> is better\n" | 
|  | + "B"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceOverlappingAfterFirstChar() { | 
|  | SafeHtml o = html("abcd"); | 
|  | RawFindReplace ab = new RawFindReplace("ab", "AB"); | 
|  | RawFindReplace bc = new RawFindReplace("bc", "23"); | 
|  | RawFindReplace cd = new RawFindReplace("cd", "YZ"); | 
|  |  | 
|  | assertThat(o.replaceAll(repls(ab, bc)).asString()).isEqualTo("ABcd"); | 
|  | assertThat(o.replaceAll(repls(bc, ab)).asString()).isEqualTo("ABcd"); | 
|  | assertThat(o.replaceAll(repls(ab, bc, cd)).asString()).isEqualTo("ABYZ"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceOverlappingAtFirstCharLongestMatch() { | 
|  | SafeHtml o = html("abcd"); | 
|  | RawFindReplace ab = new RawFindReplace("ab", "AB"); | 
|  | RawFindReplace abc = new RawFindReplace("[^d][^d][^d]", "234"); | 
|  |  | 
|  | assertThat(o.replaceAll(repls(ab, abc)).asString()).isEqualTo("ABcd"); | 
|  | assertThat(o.replaceAll(repls(abc, ab)).asString()).isEqualTo("234d"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void replaceOverlappingAtFirstCharFirstMatch() { | 
|  | SafeHtml o = html("abcd"); | 
|  | RawFindReplace ab1 = new RawFindReplace("ab", "AB"); | 
|  | RawFindReplace ab2 = new RawFindReplace("[^cd][^cd]", "12"); | 
|  |  | 
|  | assertThat(o.replaceAll(repls(ab1, ab2)).asString()).isEqualTo("ABcd"); | 
|  | assertThat(o.replaceAll(repls(ab2, ab1)).asString()).isEqualTo("12cd"); | 
|  | } | 
|  |  | 
|  | @Test | 
|  | public void failedSanitization() { | 
|  | SafeHtml o = html("abcd"); | 
|  | LinkFindReplace evil = new LinkFindReplace("(b)", "javascript:alert('$1')"); | 
|  | LinkFindReplace ok = new LinkFindReplace("(b)", "/$1"); | 
|  | assertThat(o.replaceAll(repls(evil)).asString()).isEqualTo("abcd"); | 
|  | String linked = "a<a href=\"/b\">b</a>cd"; | 
|  | assertThat(o.replaceAll(repls(ok)).asString()).isEqualTo(linked); | 
|  | assertThat(o.replaceAll(repls(evil, ok)).asString()).isEqualTo(linked); | 
|  | } | 
|  |  | 
|  | private static SafeHtml html(String text) { | 
|  | return new SafeHtmlBuilder().append(text).toSafeHtml(); | 
|  | } | 
|  |  | 
|  | private static List<FindReplace> repls(FindReplace... repls) { | 
|  | return Arrays.asList(repls); | 
|  | } | 
|  | } |