# frozen_string_literal: true require 'rails_helper' require Rails.root.join('app', 'lib', 'sanitize_config.rb') describe Sanitize::Config do shared_examples 'common HTML sanitization' do it 'keeps h1' do expect(Sanitize.fragment('

Foo

', subject)).to eq '

Foo

' end it 'keeps ul' do expect(Sanitize.fragment('

Check out:

', subject)).to eq '

Check out:

' end it 'removes a without href' do expect(Sanitize.fragment('Test', subject)).to eq 'Test' end it 'removes a without href and only keeps text content' do expect(Sanitize.fragment('Test', subject)).to eq 'foo&Test' end it 'removes a with unsupported scheme in href' do expect(Sanitize.fragment('Test', subject)).to eq 'Test' end it 'keeps a with href' do expect(Sanitize.fragment('Test', subject)).to eq 'Test' end it 'removes a with unparsable href' do expect(Sanitize.fragment('Test', subject)).to eq 'Test' end it 'keeps a with supported scheme and no host' do expect(Sanitize.fragment('Test', subject)).to eq 'Test' end end describe '::MASTODON_STRICT' do subject { Sanitize::Config::MASTODON_STRICT } it_behaves_like 'common HTML sanitization' it 'keeps a with href and rel tag' do expect(Sanitize.fragment('', subject)).to eq 'Test' end end describe '::MASTODON_STRICT with outgoing toots' do subject { Sanitize::Config::MASTODON_STRICT.merge(outgoing: true) } around do |example| original_web_domain = Rails.configuration.x.web_domain example.run Rails.configuration.x.web_domain = original_web_domain end it_behaves_like 'common HTML sanitization' it 'keeps a with href and rel tag, not adding to rel if url is local' do Rails.configuration.x.web_domain = 'domain.test' expect(Sanitize.fragment('', subject)).to eq '' end end end