Andreas Hocevar
96 lines
3.2 KiB
JavaScript
96 lines
3.2 KiB
JavaScript
// Copyright 2013 The Closure Library Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS-IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
/**
|
|
* @fileoverview Unit tests for goog.html.legacyconversions.
|
|
*/
|
|
|
|
goog.provide('goog.html.legacyconversionsTest');
|
|
|
|
goog.require('goog.html.SafeHtml');
|
|
goog.require('goog.html.SafeUrl');
|
|
goog.require('goog.html.TrustedResourceUrl');
|
|
goog.require('goog.html.legacyconversions');
|
|
goog.require('goog.testing.PropertyReplacer');
|
|
goog.require('goog.testing.jsunit');
|
|
|
|
goog.setTestOnly('goog.html.legacyconversionsTest');
|
|
|
|
|
|
/** @type {!goog.testing.PropertyReplacer} */
|
|
var stubs = new goog.testing.PropertyReplacer();
|
|
|
|
|
|
function setUp() {
|
|
// Reset goog.html.legacyconveresions global defines for each test case.
|
|
stubs.set(goog.html.legacyconversions, 'ALLOW_LEGACY_CONVERSIONS', true);
|
|
}
|
|
|
|
|
|
function testSafeHtmlFromString_allowedIfNotGloballyDisabled() {
|
|
var helloWorld = 'Hello <em>World</em>';
|
|
var safeHtml = goog.html.legacyconversions.safeHtmlFromString(helloWorld);
|
|
assertEquals(helloWorld, goog.html.SafeHtml.unwrap(safeHtml));
|
|
assertNull(safeHtml.getDirection());
|
|
}
|
|
|
|
|
|
function testSafeHtmlFromString_guardedByGlobalFlag() {
|
|
stubs.set(goog.html.legacyconversions, 'ALLOW_LEGACY_CONVERSIONS', false);
|
|
assertEquals(
|
|
'Error: Legacy conversion from string to goog.html types is disabled',
|
|
assertThrows(function() {
|
|
goog.html.legacyconversions.safeHtmlFromString(
|
|
'Possibly untrusted <html>');
|
|
}).message);
|
|
}
|
|
|
|
|
|
function testSafeHtmlFromString_reports() {
|
|
var reported = false;
|
|
goog.html.legacyconversions.setReportCallback(function() {
|
|
reported = true;
|
|
});
|
|
goog.html.legacyconversions.safeHtmlFromString('<html>');
|
|
assertTrue('Expected legacy conversion to be reported.', reported);
|
|
|
|
reported = false;
|
|
stubs.set(goog.html.legacyconversions, 'ALLOW_LEGACY_CONVERSIONS', false);
|
|
try {
|
|
goog.html.legacyconversions.safeHtmlFromString('<html>');
|
|
} catch (expected) {
|
|
}
|
|
assertFalse('Expected legacy conversion to not be reported.', reported);
|
|
|
|
stubs.set(goog.html.legacyconversions, 'ALLOW_LEGACY_CONVERSIONS', true);
|
|
goog.html.legacyconversions.setReportCallback(goog.nullFunction);
|
|
goog.html.legacyconversions.safeHtmlFromString('<html>');
|
|
assertFalse('Expected legacy conversion to not be reported.', reported);
|
|
}
|
|
|
|
|
|
function testSafeUrlFromString() {
|
|
var url = 'https://www.google.com';
|
|
var safeUrl = goog.html.legacyconversions.safeUrlFromString(url);
|
|
assertEquals(url, goog.html.SafeUrl.unwrap(safeUrl));
|
|
}
|
|
|
|
|
|
function testTrustedResourceUrlFromString() {
|
|
var url = 'https://www.google.com/script.js';
|
|
var trustedResourceUrl =
|
|
goog.html.legacyconversions.trustedResourceUrlFromString(url);
|
|
assertEquals(url, goog.html.TrustedResourceUrl.unwrap(trustedResourceUrl));
|
|
}
|