27 lines
1.5 KiB
TypeScript
27 lines
1.5 KiB
TypeScript
import { expect, test } from "bun:test";
|
|
import { JSDOM } from "jsdom";
|
|
import { builderPreviewHTML } from "../src/preview-html.ts";
|
|
|
|
test("preview sanitization preserves email layout and editor markers but removes executable content", () => {
|
|
const { window } = new JSDOM("");
|
|
const result = String(builderPreviewHTML('<html><head><style>td{padding:12px}</style></head><body><table data-block-id="one"><tr><td><img src="https://example.com/a.png" onerror="alert(1)"><a href="javascript:alert(1)">Hello</a></td></tr></table><script>alert(1)</script><iframe src="https://example.com"></iframe></body></html>', window.document as unknown as Document));
|
|
expect(result).toContain('data-block-id="one"');
|
|
expect(result).toContain('<table');
|
|
expect(result).toContain('<style>');
|
|
expect(result).not.toMatch(/onerror|javascript:|<script|<iframe/);
|
|
window.close();
|
|
});
|
|
|
|
test("separately bundled preview modules reuse one realm sanitizer", async () => {
|
|
const { window } = new JSDOM("");
|
|
const doc = window.document as unknown as Document;
|
|
builderPreviewHTML("<p>First page</p>", doc);
|
|
const key = Symbol.for("wrnexus.block-editor.preview-sanitizer");
|
|
const first = (window as any)[key];
|
|
const secondPageModule = "../src/preview-html.ts?second-page";
|
|
const secondModule = await import(secondPageModule);
|
|
expect(String(secondModule.builderPreviewHTML("<p>Second page</p>", doc))).toContain("Second page");
|
|
expect((window as any)[key]).toBe(first);
|
|
window.close();
|
|
});
|