require "#{File.dirname(__FILE__)}/../abstract_unit"
require "#{File.dirname(__FILE__)}/../testing_sandbox"
class TextHelperTest < Test::Unit::TestCase
include ActionView::Helpers::TextHelper
include ActionView::Helpers::TagHelper
include TestingSandbox
def setup
# This simulates the fact that instance variables are reset every time
# a view is rendered. The cycle helper depends on this behavior.
@_cycles = nil if (defined? @_cycles)
end
def test_simple_format
assert_equal "
", simple_format("A paragraph\n\nand another one!")
assert_equal "
A paragraph\n With a newline
", simple_format("A paragraph\n With a newline")
text = "A\nB\nC\nD".freeze
assert_equal "
A\n B\n C\n D
", simple_format(text)
text = "A\r\n \nB\n\n\r\n\t\nC\nD".freeze
assert_equal "
A\n \n B
\n\n
\t\n C\n D
", simple_format(text)
end
def test_truncate
assert_equal "Hello World!", truncate("Hello World!", 12)
assert_equal "Hello Wor...", truncate("Hello World!!", 12)
end
def test_truncate_should_use_default_length_of_30
str = "This is a string that will go longer then the default truncate length of 30"
assert_equal str[0...27] + "...", truncate(str)
end
def test_truncate_multibyte
with_kcode 'none' do
assert_equal "\354\225\210\353\205\225\355...", truncate("\354\225\210\353\205\225\355\225\230\354\204\270\354\232\224", 10)
end
with_kcode 'u' do
assert_equal "\354\225\204\353\246\254\353\236\221 \354\225\204\353\246\254 ...",
truncate("\354\225\204\353\246\254\353\236\221 \354\225\204\353\246\254 \354\225\204\353\235\274\353\246\254\354\230\244", 10)
end
end
def test_strip_links
assert_equal "Dont touch me", strip_links("Dont touch me")
assert_equal "on my mind\nall day long", strip_links("on my mind\nall day long")
assert_equal "0wn3d", strip_links("0wn3d")
assert_equal "Magic", strip_links("Magic")
assert_equal "FrrFox", strip_links("FrrFox")
assert_equal "My mind\nall day long", strip_links("My mind\nall day long")
assert_equal "all day long", strip_links("<a href='hello'>all day long</a>")
end
def test_highlighter
assert_equal(
"This is a beautiful morning",
highlight("This is a beautiful morning", "beautiful")
)
assert_equal(
"This is a beautiful morning, but also a beautiful day",
highlight("This is a beautiful morning, but also a beautiful day", "beautiful")
)
assert_equal(
"This is a beautiful morning, but also a beautiful day",
highlight("This is a beautiful morning, but also a beautiful day", "beautiful", '\1')
)
assert_equal(
"This text is not changed because we supplied an empty phrase",
highlight("This text is not changed because we supplied an empty phrase", nil)
)
assert_equal ' ', highlight(' ', 'blank text is returned verbatim')
end
def test_highlighter_with_regexp
assert_equal(
"This is a beautiful! morning",
highlight("This is a beautiful! morning", "beautiful!")
)
assert_equal(
"This is a beautiful! morning",
highlight("This is a beautiful! morning", "beautiful! morning")
)
assert_equal(
"This is a beautiful? morning",
highlight("This is a beautiful? morning", "beautiful? morning")
)
end
def test_highlighting_multiple_phrases_in_one_pass
assert_equal %(wowem), highlight('wow em', %w(wow em), '\1')
end
def test_excerpt
assert_equal("...is a beautiful morni...", excerpt("This is a beautiful morning", "beautiful", 5))
assert_equal("This is a...", excerpt("This is a beautiful morning", "this", 5))
assert_equal("...iful morning", excerpt("This is a beautiful morning", "morning", 5))
assert_nil excerpt("This is a beautiful morning", "day")
end
def test_excerpt_with_regex
assert_equal('...is a beautiful! morn...', excerpt('This is a beautiful! morning', 'beautiful', 5))
assert_equal('...is a beautiful? morn...', excerpt('This is a beautiful? morning', 'beautiful', 5))
end
def test_excerpt_with_utf8
with_kcode('u') do
assert_equal("...fficiency could not be h...", excerpt("That's why efficiency could not be helped", 'could', 8))
end
with_kcode('none') do
assert_equal("...\203ciency could not be h...", excerpt("That's why efficiency could not be helped", 'could', 8))
end
end
def test_word_wrap
assert_equal("my very very\nvery long\nstring", word_wrap("my very very very long string", 15))
end
def test_word_wrap_with_extra_newlines
assert_equal("my very very\nvery long\nstring\n\nwith another\nline", word_wrap("my very very very long string\n\nwith another line", 15))
end
def test_pluralization
assert_equal("1 count", pluralize(1, "count"))
assert_equal("2 counts", pluralize(2, "count"))
assert_equal("1 count", pluralize('1', "count"))
assert_equal("2 counts", pluralize('2', "count"))
assert_equal("1,066 counts", pluralize('1,066', "count"))
assert_equal("1.25 counts", pluralize('1.25', "count"))
assert_equal("2 counters", pluralize(2, "count", "counters"))
assert_equal("0 counters", pluralize(nil, "count", "counters"))
assert_equal("2 people", pluralize(2, "person"))
assert_equal("10 buffaloes", pluralize(10, "buffalo"))
end
uses_mocha("should_just_add_s_for_pluralize_without_inflector_loaded") do
def test_should_just_add_s_for_pluralize_without_inflector_loaded
Object.expects(:const_defined?).with("Inflector").times(4).returns(false)
assert_equal("1 count", pluralize(1, "count"))
assert_equal("2 persons", pluralize(2, "person"))
assert_equal("2 personss", pluralize("2", "persons"))
assert_equal("2 counts", pluralize(2, "count"))
assert_equal("10 buffalos", pluralize(10, "buffalo"))
end
end
def test_auto_link_parsing
urls = %w(http://www.rubyonrails.com
http://www.rubyonrails.com:80
http://www.rubyonrails.com/~minam
https://www.rubyonrails.com/~minam
http://www.rubyonrails.com/~minam/url%20with%20spaces
http://www.rubyonrails.com/foo.cgi?something=here
http://www.rubyonrails.com/foo.cgi?something=here&and=here
http://www.rubyonrails.com/contact;new
http://www.rubyonrails.com/contact;new%20with%20spaces
http://www.rubyonrails.com/contact;new?with=query&string=params
http://www.rubyonrails.com/~minam/contact;new?with=query&string=params
http://en.wikipedia.org/wiki/Wikipedia:Today%27s_featured_picture_%28animation%29/January_20%2C_2007
http://www.mail-archive.com/rails@lists.rubyonrails.org/
)
urls.each do |url|
assert_equal %(#{url}), auto_link(url)
end
end
def test_auto_linking
email_raw = 'david@loudthinking.com'
email_result = %{#{email_raw}}
email2_raw = '+david@loudthinking.com'
email2_result = %{#{email2_raw}}
link_raw = 'http://www.rubyonrails.com'
link_result = %{#{link_raw}}
link_result_with_options = %{#{link_raw}}
link2_raw = 'www.rubyonrails.com'
link2_result = %{#{link2_raw}}
link3_raw = 'http://manuals.ruby-on-rails.com/read/chapter.need_a-period/103#page281'
link3_result = %{#{link3_raw}}
link4_raw = 'http://foo.example.com/controller/action?parm=value&p2=v2#anchor123'
link4_result = %{#{link4_raw}}
link5_raw = 'http://foo.example.com:3000/controller/action'
link5_result = %{#{link5_raw}}
link6_raw = 'http://foo.example.com:3000/controller/action+pack'
link6_result = %{#{link6_raw}}
link7_raw = 'http://foo.example.com/controller/action?parm=value&p2=v2#anchor-123'
link7_result = %{#{link7_raw}}
link8_raw = 'http://foo.example.com:3000/controller/action.html'
link8_result = %{#{link8_raw}}
link9_raw = 'http://business.timesonline.co.uk/article/0,,9065-2473189,00.html'
link9_result = %{#{link9_raw}}
link10_raw = 'http://www.mail-archive.com/ruby-talk@ruby-lang.org/'
link10_result = %{#{link10_raw}}
assert_equal %(hello #{email_result}), auto_link("hello #{email_raw}", :email_addresses)
assert_equal %(Go to #{link_result}), auto_link("Go to #{link_raw}", :urls)
assert_equal %(Go to #{link_raw}), auto_link("Go to #{link_raw}", :email_addresses)
assert_equal %(Go to #{link_result} and say hello to #{email_result}), auto_link("Go to #{link_raw} and say hello to #{email_raw}")
assert_equal %(
Link #{link_result}
), auto_link("
Link #{link_raw}
")
assert_equal %(
#{link_result} Link
), auto_link("
#{link_raw} Link
")
assert_equal %(
Link #{link_result_with_options}
), auto_link("
Link #{link_raw}
", :all, {:target => "_blank"})
assert_equal %(Go to #{link_result}.), auto_link(%(Go to #{link_raw}.))
assert_equal %(
Go to #{link_result}, then say hello to #{email_result}.
), auto_link(%(
Go to #{link_raw}, then say hello to #{email_raw}.
))
assert_equal %(Go to #{link2_result}), auto_link("Go to #{link2_raw}", :urls)
assert_equal %(Go to #{link2_raw}), auto_link("Go to #{link2_raw}", :email_addresses)
assert_equal %(
Link #{link2_result}
), auto_link("
Link #{link2_raw}
")
assert_equal %(
#{link2_result} Link
), auto_link("
#{link2_raw} Link
")
assert_equal %(Go to #{link2_result}.), auto_link(%(Go to #{link2_raw}.))
assert_equal %(
Say hello to #{email_result}, then go to #{link2_result}.
), auto_link(%(
Say hello to #{email_raw}, then go to #{link2_raw}.
))
assert_equal %(Go to #{link3_result}), auto_link("Go to #{link3_raw}", :urls)
assert_equal %(Go to #{link3_raw}), auto_link("Go to #{link3_raw}", :email_addresses)
assert_equal %(
Link #{link3_result}
), auto_link("
Link #{link3_raw}
")
assert_equal %(
#{link3_result} Link
), auto_link("
#{link3_raw} Link
")
assert_equal %(Go to #{link3_result}.), auto_link(%(Go to #{link3_raw}.))
assert_equal %(
Go to #{link3_result}. seriously, #{link3_result}? i think I'll say hello to #{email_result}. instead.
), auto_link(%(
Go to #{link3_raw}. seriously, #{link3_raw}? i think I'll say hello to #{email_raw}. instead.
))
assert_equal %(
Link #{link4_result}
), auto_link("
Link #{link4_raw}
")
assert_equal %(
#{link4_result} Link
), auto_link("
#{link4_raw} Link
")
assert_equal %(
#{link5_result} Link
), auto_link("
#{link5_raw} Link
")
assert_equal %(
#{link6_result} Link
), auto_link("
#{link6_raw} Link
")
assert_equal %(
#{link7_result} Link
), auto_link("
#{link7_raw} Link
")
assert_equal %(Go to #{link8_result}), auto_link("Go to #{link8_raw}", :urls)
assert_equal %(Go to #{link8_raw}), auto_link("Go to #{link8_raw}", :email_addresses)
assert_equal %(
Link #{link8_result}
), auto_link("
Link #{link8_raw}
")
assert_equal %(
#{link8_result} Link
), auto_link("
#{link8_raw} Link
")
assert_equal %(Go to #{link8_result}.), auto_link(%(Go to #{link8_raw}.))
assert_equal %(
Go to #{link8_result}. seriously, #{link8_result}? i think I'll say hello to #{email_result}. instead.
), auto_link(%(
Go to #{link8_raw}. seriously, #{link8_raw}? i think I'll say hello to #{email_raw}. instead.
))
assert_equal %(Go to #{link9_result}), auto_link("Go to #{link9_raw}", :urls)
assert_equal %(Go to #{link9_raw}), auto_link("Go to #{link9_raw}", :email_addresses)
assert_equal %(
Link #{link9_result}
), auto_link("
Link #{link9_raw}
")
assert_equal %(
#{link9_result} Link
), auto_link("
#{link9_raw} Link
")
assert_equal %(Go to #{link9_result}.), auto_link(%(Go to #{link9_raw}.))
assert_equal %(
Go to #{link9_result}. seriously, #{link9_result}? i think I'll say hello to #{email_result}. instead.
), auto_link(%(
Go to #{link9_raw}. seriously, #{link9_raw}? i think I'll say hello to #{email_raw}. instead.
") { |url| truncate(url, 10) }
end
def test_sanitize_form
assert_sanitized "", ''
end
def test_sanitize_plaintext
raw = "foo"
assert_sanitized raw, "foo"
end
def test_sanitize_script
raw = "a b cd e f"
assert_sanitized raw, "a b cd e f"
end
def test_sanitize_js_handlers
raw = %{onthis="do that" hello}
assert_sanitized raw, %{onthis="do that" hello}
end
def test_sanitize_javascript_href
raw = %{href="javascript:bang" foo, bar}
assert_sanitized raw, %{href="javascript:bang" foo, bar}
end
def test_sanitize_image_src
raw = %{src="javascript:bang" foo, bar}
assert_sanitized raw, %{src="javascript:bang" foo, bar}
end
ActionView::Base.sanitized_allowed_tags.each do |tag_name|
define_method "test_should_allow_#{tag_name}_tag" do
assert_sanitized "start <#{tag_name} title=\"1\" onclick=\"foo\">foo bar baz#{tag_name}> end", %(start <#{tag_name} title="1">foo bar baz#{tag_name}> end)
end
end
def test_should_allow_anchors
assert_sanitized %(), %()
end
# RFC 3986, sec 4.2
def test_allow_colons_in_path_component
assert_sanitized("foo")
end
%w(src width height alt).each do |img_attr|
define_method "test_should_allow_image_#{img_attr}_attribute" do
assert_sanitized %(), %()
end
end
def test_should_handle_non_html
assert_sanitized 'abc'
end
def test_should_handle_blank_text
assert_sanitized nil
assert_sanitized ''
end
def test_should_allow_custom_tags
text = "foo"
assert_equal(text, sanitize(text, :tags => %w(u)))
end
def test_should_allow_custom_tags_with_attributes
text = %()
assert_equal(text, sanitize(text, :attributes => ['foo']))
end
[%w(img src), %w(a href)].each do |(tag, attr)|
define_method "test_should_strip_#{attr}_attribute_in_#{tag}_with_bad_protocols" do
assert_sanitized %(<#{tag} #{attr}="javascript:bang" title="1">boo#{tag}>), %(<#{tag} title="1">boo#{tag}>)
end
end
def test_should_flag_bad_protocols
%w(about chrome data disk hcp help javascript livescript lynxcgi lynxexec ms-help ms-its mhtml mocha opera res resource shell vbscript view-source vnd.ms.radio wysiwyg).each do |proto|
assert contains_bad_protocols?('src', "#{proto}://bad")
end
end
def test_should_accept_good_protocols
sanitized_allowed_protocols.each do |proto|
assert !contains_bad_protocols?('src', "#{proto}://good")
end
end
def test_should_reject_hex_codes_in_protocol
assert contains_bad_protocols?('src', "%6A%61%76%61%73%63%72%69%70%74%3A%61%6C%65%72%74%28%22%58%53%53%22%29")
assert_sanitized %(1), "1"
end
def test_should_block_script_tag
assert_sanitized %(), ""
end
[%(),
%(),
%(),
%(">),
%(),
%(),
%(),
%(),
%(),
%(),
%(),
%(),
%(),
%(),
%()].each_with_index do |img_hack, i|
define_method "test_should_not_fall_for_xss_image_hack_#{i+1}" do
assert_sanitized img_hack, ""
end
end
def test_should_sanitize_tag_broken_up_by_null
assert_sanitized %(alert(\"XSS\")), "alert(\"XSS\")"
end
def test_should_sanitize_invalid_script_tag
assert_sanitized %(), ""
end
def test_should_sanitize_script_tag_with_multiple_open_brackets
assert_sanitized %(<), "<"
assert_sanitized %(