From a7d437663d2d6f60c953c3bb0d6ea5344c63ab6e Mon Sep 17 00:00:00 2001
From: wangsongc <wangsongc@foxmail.com>
Date: Sat, 4 Dec 2021 16:34:32 +0800
Subject: [PATCH] test: add more xss and image testcase (#739)

---
 tests/unit/base.spec.js | 39 ++++++++++++++++++++++++++++++++-------
 1 file changed, 32 insertions(+), 7 deletions(-)

diff --git a/tests/unit/base.spec.js b/tests/unit/base.spec.js
index 48ff00621..83b3ceca2 100644
--- a/tests/unit/base.spec.js
+++ b/tests/unit/base.spec.js
@@ -255,15 +255,40 @@ describe('left-toolbars测试', () => {
 
 describe('xssOptions test', () => {
     it('xssOptions is enabled by default', async () => {
-      let xssCode = `<a$ <img src=x onerror=prompt(/test_really/);>#"> <a$\n<img onerror="alert(1)" src="a">`;
-      let htmlValue = `<p>&lt;a$ <img src>#&quot;&gt; &lt;a$<br />\n<img src></p>`
+        let xssCode = `<a$ <img src=x onerror=prompt(/test_really/);>#"> <a$\n<img onerror="alert(1)" src="a">`;
+        let htmlValue = `<p>&lt;a$ <img src>#&quot;&gt; &lt;a$<br />\n<img src></p>`
+        let wrapper = new factory({ d_words: null, value: '' });
+
+        const textInput = wrapper.find('textarea')
+        await textInput.setValue(xssCode)
+
+        expect(wrapper.find(textValueClass).text()).toEqual(xssCode);
+        expect(wrapper.find(htmlValueClass).text()).toEqual(htmlValue);
+    });
+
+    it('disable xssOptions', async () => {
+        let xssCode = `<a$ <img src=x onerror=prompt(/test_really/);>#"> <a$\n<img onerror="alert(1)" src="a">`;
+        let htmlValue = `<p>&lt;a$ <img src=x onerror=prompt(/test_really/);>#&quot;&gt; &lt;a$<br />\n<img onerror=\"alert(1)\" src=\"a\"></p>`
+        let wrapper = new factory({ d_words: null, value: '', xssOptions: false });
+    
+        const textInput = wrapper.find('textarea')
+        await textInput.setValue(xssCode)
+
+        expect(wrapper.find(textValueClass).text()).toEqual(xssCode);
+        expect(wrapper.find(htmlValueClass).text()).toEqual(htmlValue);
+      });
+});
+
+describe('local images upload', () => {
+    it('upload images', async () => {
+      let textValue = `![gh.png](1)`;
+      let htmlValue = `<p><img src=\"1\" alt=\"gh.png\" /></p>`
       let wrapper = new factory({ d_words: null, value: '' });
   
       const textInput = wrapper.find('textarea')
-      await textInput.setValue(xssCode)
-      wrapper.vm.$nextTick(() => {
-          expect(wrapper.find(textValueClass).text()).toEqual(xssCode);
-          expect(wrapper.find(htmlValueClass).text()).toEqual(htmlValue);
-        });
+      await textInput.setValue(textValue)
+
+      expect(wrapper.find(textValueClass).text()).toEqual(textValue);
+      expect(wrapper.find(htmlValueClass).text()).toEqual(htmlValue);
     });
 });