| // Copyright (C) 2009 The Android Open Source Project |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| package com.google.gwtexpui.safehtml.client; |
| |
| import static com.google.common.truth.Truth.assertThat; |
| |
| import java.util.Arrays; |
| import java.util.Collections; |
| import java.util.List; |
| import org.junit.Test; |
| |
| public class SafeHtml_ReplaceTest { |
| @Test |
| public void replaceEmpty() { |
| SafeHtml o = html("A\nissue42\nB"); |
| assertThat(o.replaceAll(null)).isSameAs(o); |
| assertThat(o.replaceAll(Collections.<FindReplace>emptyList())).isSameAs(o); |
| } |
| |
| @Test |
| public void replaceOneLink() { |
| SafeHtml o = html("A\nissue 42\nB"); |
| SafeHtml n = |
| o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); |
| assertThat(o).isNotSameAs(n); |
| assertThat(n.asString()).isEqualTo("A\n<a href=\"?42\">issue 42</a>\nB"); |
| } |
| |
| @Test |
| public void replaceNoLeadingOrTrailingText() { |
| SafeHtml o = html("issue 42"); |
| SafeHtml n = |
| o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); |
| assertThat(o).isNotSameAs(n); |
| assertThat(n.asString()).isEqualTo("<a href=\"?42\">issue 42</a>"); |
| } |
| |
| @Test |
| public void replaceTwoLinks() { |
| SafeHtml o = html("A\nissue 42\nissue 9918\nB"); |
| SafeHtml n = |
| o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>"))); |
| assertThat(o).isNotSameAs(n); |
| assertThat(n.asString()) |
| .isEqualTo("A\n<a href=\"?42\">issue 42</a>\n<a href=\"?9918\">issue 9918</a>\nB"); |
| } |
| |
| @Test |
| public void replaceInOrder() { |
| SafeHtml o = html("A\nissue 42\nReally GWTEXPUI-9918 is better\nB"); |
| SafeHtml n = |
| o.replaceAll( |
| repls( |
| new RawFindReplace("(GWTEXPUI-(\\d+))", "<a href=\"gwtexpui-bug?$2\">$1</a>"), |
| new RawFindReplace("(issue\\s+(\\d+))", "<a href=\"generic-bug?$2\">$1</a>"))); |
| assertThat(o).isNotSameAs(n); |
| assertThat(n.asString()) |
| .isEqualTo( |
| "A\n" |
| + "<a href=\"generic-bug?42\">issue 42</a>\n" |
| + "Really <a href=\"gwtexpui-bug?9918\">GWTEXPUI-9918</a> is better\n" |
| + "B"); |
| } |
| |
| @Test |
| public void replaceOverlappingAfterFirstChar() { |
| SafeHtml o = html("abcd"); |
| RawFindReplace ab = new RawFindReplace("ab", "AB"); |
| RawFindReplace bc = new RawFindReplace("bc", "23"); |
| RawFindReplace cd = new RawFindReplace("cd", "YZ"); |
| |
| assertThat(o.replaceAll(repls(ab, bc)).asString()).isEqualTo("ABcd"); |
| assertThat(o.replaceAll(repls(bc, ab)).asString()).isEqualTo("ABcd"); |
| assertThat(o.replaceAll(repls(ab, bc, cd)).asString()).isEqualTo("ABYZ"); |
| } |
| |
| @Test |
| public void replaceOverlappingAtFirstCharLongestMatch() { |
| SafeHtml o = html("abcd"); |
| RawFindReplace ab = new RawFindReplace("ab", "AB"); |
| RawFindReplace abc = new RawFindReplace("[^d][^d][^d]", "234"); |
| |
| assertThat(o.replaceAll(repls(ab, abc)).asString()).isEqualTo("ABcd"); |
| assertThat(o.replaceAll(repls(abc, ab)).asString()).isEqualTo("234d"); |
| } |
| |
| @Test |
| public void replaceOverlappingAtFirstCharFirstMatch() { |
| SafeHtml o = html("abcd"); |
| RawFindReplace ab1 = new RawFindReplace("ab", "AB"); |
| RawFindReplace ab2 = new RawFindReplace("[^cd][^cd]", "12"); |
| |
| assertThat(o.replaceAll(repls(ab1, ab2)).asString()).isEqualTo("ABcd"); |
| assertThat(o.replaceAll(repls(ab2, ab1)).asString()).isEqualTo("12cd"); |
| } |
| |
| @Test |
| public void failedSanitization() { |
| SafeHtml o = html("abcd"); |
| LinkFindReplace evil = new LinkFindReplace("(b)", "javascript:alert('$1')"); |
| LinkFindReplace ok = new LinkFindReplace("(b)", "/$1"); |
| assertThat(o.replaceAll(repls(evil)).asString()).isEqualTo("abcd"); |
| String linked = "a<a href=\"/b\">b</a>cd"; |
| assertThat(o.replaceAll(repls(ok)).asString()).isEqualTo(linked); |
| assertThat(o.replaceAll(repls(evil, ok)).asString()).isEqualTo(linked); |
| } |
| |
| private static SafeHtml html(String text) { |
| return new SafeHtmlBuilder().append(text).toSafeHtml(); |
| } |
| |
| private static List<FindReplace> repls(FindReplace... repls) { |
| return Arrays.asList(repls); |
| } |
| } |