wehub-resource-sync
d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
44 lines
1.3 KiB
TypeScript
44 lines
1.3 KiB
TypeScript
/**
|
|
* @vitest-environment node
|
|
*/
|
|
import { describe, expect, it, vi } from 'vitest'
|
|
|
|
vi.mock('@sim/emcn', () => ({
|
|
Duplicate: () => null,
|
|
Tooltip: {},
|
|
}))
|
|
|
|
vi.mock('@/app/(interfaces)/chat/components/message/components/file-download', () => ({
|
|
ChatFileDownload: () => null,
|
|
ChatFileDownloadAll: () => null,
|
|
}))
|
|
|
|
vi.mock('@/app/(interfaces)/chat/components/message/components/markdown-renderer', () => ({
|
|
default: () => null,
|
|
}))
|
|
|
|
import { escapeHtml } from '@/app/(interfaces)/chat/components/message/message'
|
|
|
|
describe('escapeHtml', () => {
|
|
it('escapes all five HTML-significant characters', () => {
|
|
expect(escapeHtml('&<>"\'')).toBe('&<>"'')
|
|
})
|
|
|
|
it('neutralizes a markup-breakout filename payload', () => {
|
|
const payload = '</title><img src=x onerror=alert(document.origin)>'
|
|
const escaped = escapeHtml(payload)
|
|
expect(escaped).not.toContain('<img')
|
|
expect(escaped).not.toContain('</title>')
|
|
expect(escaped).toBe('</title><img src=x onerror=alert(document.origin)>')
|
|
})
|
|
|
|
it('escapes ampersands first so entities are not double-broken', () => {
|
|
expect(escapeHtml('a & b < c')).toBe('a & b < c')
|
|
})
|
|
|
|
it('leaves safe strings untouched', () => {
|
|
expect(escapeHtml('report-2026.pdf')).toBe('report-2026.pdf')
|
|
expect(escapeHtml('')).toBe('')
|
|
})
|
|
})
|